Filtered by vendor Wso2
Subscriptions
Filtered by product Wso2 Carbon Registry Kernel
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-2372 | 1 Wso2 | 7 Wso2 Api Manager, Wso2 Carbon Registry Kernel, Wso2 Enterprise Integrator and 4 more | 2026-11-02 | 5.4 Medium |
| The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation constraints. This allows an attacker to provide a crafted URL that can redirect users to an arbitrary external domain. By leveraging this open redirection vulnerability, an attacker can craft a malicious link that, when clicked by a user, redirects them to an attacker-controlled page. This can be used in conjunction with social engineering techniques to execute phishing attacks, aiming to obtain sensitive information or cause other harm. | ||||
Page 1 of 1.