Skip to content
OpenAdvisories

Package · Maven

org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.endpoint.util

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.4
    CVE-2024-1440

    Open Redirection in Multiple WSO2 Products via Multi-Option Authentication Endpoint

    An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A malicious actor can craft a valid link that redirects users to …

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Identity Server as Key Manager Maven