CVE-2024-12141

The WSO2 Products are vulnerable to an Open Redirect (CWE-601) due to insufficient validation of callback URLs. The root cause is the use of weak regular expressions or the complete omission of validation during URL processing. An attacker can manipulate these links to redirect users to malicious...