Description
Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WSO2 | WSO2 API Manager | 3.1.0.0 – < 3.1.0.14, 3.2.0.0 – < 3.2.0.10 | 3.1.0.14 |
| WSO2 | WSO2 Identity Server | 5.10.0.0 – < 5.10.0.5 | 5.10.0.5 |
| WSO2 | WSO2 IS as Key Manager | 5.10.0.0 – < 5.10.0.5 | 5.10.0.5 |