A vulnerability classified as critical was found in WSO2 API Control Plane, API Manager, Carbon Identity Recovery Management, Identity Server, Identity Server as Key Manager, Open Banking IAM, Traffic Manager and Universal Gateway. Impacted is an unknown function of the component User Self-Signup Flow. Executing a manipulation can lead to improper input validation.
This vulnerability is tracked as CVE-2024-10302. The attack can be launched remotely. No exploit exists.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2024-10302 | WSO2 API Control Plane User Self-Signup Flow input validation
A vulnerability classified as critical was found in WSO2 API Control Plane, API Manager, Carbon Identity Recovery Management, Identity Server, Identity Server as Key Manager, Open Banking IAM, Traffic Manager and Universal Gateway.…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR