Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-31664
HistoryMay 23, 2023 - 1:15 a.m.

Cross site scripting

2023-05-2301:15:00
PRIOn knowledge base
www.prio-n.com
2
vulnerability
wso2 api manager
arbitrary script execution
crafted payload

0.001 Low

EPSS

Percentile

44.0%

A reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/login.do of WSO2 API Manager before 4.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter.

CPENameOperatorVersion
api_managerlt4.2.0

0.001 Low

EPSS

Percentile

44.0%

Related for PRION:CVE-2023-31664