CVE-2019-18882

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

Design/Logic Flaw

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

CVE-2019-18882

WSO2 Identity Server (IS) acting as Key Manager 5.7.0 is vulnerable to a stored XSS in the download-userinfo.jag endpoint caused by mishandling of Content-Type. The vulnerability is described as a stored XSS in the referenced CVE-2019-18882 entry; no exploit details, specific impact scope, or rem...