CVE-2023-6838

2023-12-1509:50:52

CWE-79

WSO2

raw.githubusercontent.com

xss vulnerability

authentication endpoint

tampering request parameter

5.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

15.9%

JSON

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated requests.