Skip to content
OpenAdvisories

Package · Maven

org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2023-6837

    Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation

    Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order for this vulnerability to have any impact on your deployment, following conditions must be met: * An IDP configured for federated authenti…

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Identity Server as Key Manager Maven