Description (CNA)
An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript, which is later rendered in the browser when accessed by other users. A successful attack could result in redirection to malicious websites, unauthorized UI modifications, or exfiltration of browser-accessible data. However, session-related sensitive cookies are protected by the httpOnly flag, preventing session hijacking.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WSO2 / WSO2 API Manager | unknown 0 before 3.2.0; affected 3.2.0 before 3.2.0.428; affected 3.2.1 before 3.2.1.48; affected 4.1.0 before 4.1.0.209; affected 4.2.0 before 4.2.0.145; affected 4.3.0 before 4.3.0.60; affected 4.4.0 before 4.4.0.23; affected 4.5.0 before 4.5.0.7 |
| WSO2 / WSO2 API Control Plane | affected 4.5.0 before 4.5.0.8 |
| WSO2 / WSO2 Universal Gateway | affected 4.5.0 before 4.5.0.7 |
| WSO2 / WSO2 Traffic Manager | affected 4.5.0 before 4.5.0.7 |
| WSO2 / WSO2 Carbon API Management API | affected 6.7.206 before 6.7.206.559; affected 6.7.210 before 6.7.210.48; affected 9.20.74 before 9.20.74.365; affected 9.28.116 before 9.28.116.321; affected 9.29.120 before 9.29.120.163; affected 9.30.67 before 9.30.67.80; affected 9.31.86 before 9.31.86.30; unaffected 9.31.117 through * |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.