Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.4 views

CVE-2025-5770

A reflected cross-site scripting XSS vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling...

6.1CVSS6AI score0.00176EPSS
Exploits0References1
NVD
NVD
added 2025/11/05 7:16 p.m.7 views

CVE-2025-5770

A reflected cross-site scripting XSS vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling...

6.1CVSS0.00176EPSS
Exploits0References1
OSV
OSV
added 2023/04/12 6:15 p.m.5 views

CVE-2023-30528

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it...

6.5CVSS6.6AI score0.00397EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.6 views

Jenkins Plugin WSO2 Oauth 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.6AI score0.00397EPSS
Exploits0References4
Rows per page
Query Builder