CVE-2024-2372

Multiple WSO2 products are affected by an open redirection vulnerability (CWE-601). The root cause is that the software accepts user-supplied input to construct redirection URLs without enforcing necessary validation constraints. An attacker can exploit this by providing a crafted URL that redire...