CVE-2024-5563

The WSO2 Identity Server is affected by an incomplete reCaptcha implementation within certain authentication flows. Even when the reCaptcha option is enabled, the protection mechanism is bypassed in specific flows, allowing attackers to perform brute force attacks . If successful, these attacks c...