WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability
Moderate severity
GitHub Reviewed
Published
Dec 22, 2023
to the GitHub Advisory Database
•
Updated Dec 22, 2023
Package
Affected versions
< 4.7.37
Patched versions
4.7.37
Description
Published by the National Vulnerability Database
Dec 18, 2023
Published to the GitHub Advisory Database
Dec 22, 2023
Last updated
Dec 22, 2023
Reviewed
Dec 22, 2023
WSO2 Registry has been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.
References