CVE-2019-18882

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

CVE-2019-18882

creationtimestamp| type| source ---|---|--- 2024-02-11 11:01:46+00:00| seen| https://t.me/ctinow/182746...

CVE-2019-18882

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

CVE-2019-18882

WSO2 Identity Server (IS) acting as Key Manager 5.7.0 is vulnerable to a stored XSS in the download-userinfo.jag endpoint caused by mishandling of Content-Type. The vulnerability is described as a stored XSS in the referenced CVE-2019-18882 entry; no exploit details, specific impact scope, or rem...