CVE-2024-12141 Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks

The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when processed through a weak regular expression or when validation is omitted. An attacker can exploit this by crafting a link that appears legitimate but redirects users to an...