CVE-2024-2321

An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed directly using a refresh token instead of the expected access token. Due to improper authorization checks and token mapping, session cookies are not required for API access, potential...

CVE-2024-2321

creationtimestamp| type| source ---|---|--- 2025-02-27 04:25:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5647 2025-02-27 07:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj5f4ci3m72p 2025-02-27 08:53:34+00:00| seen| https://t.me/cvedetector/19024...

CVE-2024-2321

WSO2 CVE-2024-2321 involves an incorrect authorization vulnerability across multiple WSO2 products that allows API access using a refresh token instead of an access token due to inadequate authorization checks and token mapping. Connected sources corroborate the issue and note that exploitation r...