Lucene search
K

Exploit for Cross-site Scripting in Wso2 Api_Manager

🗓️ 03 Apr 2021 13:49:39Reported by JHHAXType 
githubexploit
 githubexploit
🔗 github.com👁 185 Views

Exploit for Cross-site Scripting in Wso2 Api Manager. WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. PoC available for CVE-2020-17453. Discovered by Jackson Henry and Nicholas Young.

Related
ReporterTitlePublishedViews
Family
Circl
CVE-2020-17453
29 Mar 202103:08
circl
CNNVD
WSO2 Management Console 跨站脚本漏洞
5 Apr 202100:00
cnnvd
CVE
CVE-2020-17453
5 Apr 202100:00
cve
Cvelist
CVE-2020-17453
5 Apr 202100:00
cvelist
Hacker One
MTN Group: Cross-site Scripting (XSS) - Reflected on https://api.mtn.sd/carbon/admin/login.jsp via `msgId` parameter - CVE-2020-17453
9 Apr 202113:14
hackerone
Nuclei
WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting
12 Jun 202603:02
nuclei
NVD
CVE-2020-17453
5 Apr 202122:15
nvd
Openbugbounty
All Vulnerabilities for api.viss.gov.lv Patched via Open Bug Bounty
23 Apr 202109:12
openbugbounty
OSV
CVE-2020-17453
5 Apr 202122:15
osv
Prion
Design/Logic Flaw
5 Apr 202122:15
prion
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Apr 2021 07:54Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 3.16.1
EPSS0.57847
185