CVE-2016-4311: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...

CVE-2016-4311

Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...

PT-2017-8466

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server version 5.1.0 Description The issue allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, or have unspecified...

PT-2017-8465

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server version 5.1.0 Description A cross-site request forgery CSRF issue exists in the XACML flow feature, allowing remote attackers to hijack the authentication of privileged users for requests that process XACML requests via th...