Skip to content
OpenAdvisories

Product · WSO2

WSO2 Carbon Identity Application Authentication Framework

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2024-4412

    Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations

    The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerabi…

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Identity Server as Key Manager