CVE-2023-6835

2023-12-1510:15:09

Google

osv.dev

wso2 products

vulnerability

forum feature

input validation

api rating manipulation

software

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

15.9%

JSON

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.

CPENameOperatorVersion
product-apimeq1.9.0-Beta-3
product-apimeq2.0.0-M5
product-apimeq2.2.0
product-apimeq2.0.0-M1
product-apimeq1.9.0
product-apimeq2.0.0-M2
product-apimeq1.9.0-Beta-2
product-apimeq2.1.0-update10
product-apimeq2.0.0-rc3
product-apimeq2.1.0-update1

Name	Operator	Version
product-apim	eq	1.9.0-Beta-3
product-apim	eq	2.0.0-M5
product-apim	eq	2.2.0
product-apim	eq	2.0.0-M1
product-apim	eq	1.9.0
product-apim	eq	2.0.0-M2
product-apim	eq	1.9.0-Beta-2
product-apim	eq	2.1.0-update10
product-apim	eq	2.0.0-rc3
product-apim	eq	2.1.0-update1