Description
An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A malicious actor can craft a valid link that redirects users to an attacker-controlled site.
By exploiting this vulnerability, an attacker may trick users into visiting a malicious page, enabling phishing attacks to harvest sensitive information or perform other harmful actions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WSO2 | WSO2 Identity Server | 5.10.0 – < 5.10.0.278, 5.11.0 – < 5.11.0.347, 6.0.0 – < 6.0.0.185, 6.1.0 – < 6.1.0.145, 7.0.0 – < 7.0.0.30 | 5.10.0.278 |
| WSO2 | WSO2 API Manager | 3.1.0 – < 3.1.0.262, 3.2.0 – < 3.2.0.344, 4.0.0 – < 4.0.0.296 | 3.1.0.262 |
| WSO2 | WSO2 Identity Server as Key Manager | 5.10.0 – < 5.10.0.298 | 5.10.0.298 |
| WSO2 | WSO2 Open Banking AM | 2.0.0 – < 2.0.0.308 | 2.0.0.308 |
| WSO2 | WSO2 Open Banking IAM | 2.0.0 – < 2.0.0.327 | 2.0.0.327 |
| WSO2 | WSO2 Carbon Identity Application Authentication Endpoint(Utils) | 5.17.5 – < 5.17.5.256, 5.18.187 – < 5.18.187.257, 5.23.8 – < 5.23.8.174, 5.25.92 – < 5.25.92.77, 7.0.78 – < 7.0.78.18 | 5.17.5.256 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.endpoint.util | >= 6.0.0, < 7.0.111 | 7.0.111 | GHSA-cp5v-2hmc-3vjx |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.endpoint.util | < 5.25.707 | 5.25.707 | GHSA-cp5v-2hmc-3vjx |