Wso2 Carbon User Management Ui
Approved changes feed: RSS · Atom
cpe:2.3:a:wso2:wso2_carbon_user_management_ui:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877) |
|---|---|
| Product | Wso2 Carbon User Management Ui (382a198d-9530-542b-8b96-448df1b71def) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5139 |
vulnerable | 2026-11-03 10:44:50.676699 |
Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection
MEDIUM (6.1)
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint.
Successful exploitation allows an attacker to redirect the user's browser to a malicious website, modify the web page's user interface, or extract sensitive information from the browser. However, due to the `httpOnly` flag on session-related cookies, session hijacking is not possible.
Published: 2026-10-21T13:36:49.246Z
Updated: 2026-10-30T17:06:32.391Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.