CVE-2025-0326

The WSO2 Identity Server contains a vulnerability where the system fails to invalidate existing access tokens for sub-organization users during sensitive account management operations, such as password resets , role changes , or sub-organization disablement . This improper token revocation allows...