Lucene search
Veracode Vulnerability DatabaseVERACODE:35459HistoryMay 10, 2022 - 5:13 a.m.
Cross-site Scripting (XSS)
2022-05-1005:13:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
xss
org.wso2.carbon.ui
getsafetext function
login.jsp
output encoding
errorcode parameter
malicious javascript
software vulnerability
EPSS
0.046
Percentile
92.7%
org.wso2.carbon.ui is vulnerable to cross-site scripting. The vulnerability exists due to the improper output encoding in the errorCode parameter in the getSafeText function of login.jsp, allowing an attacker to inject and execute malicious javascript
References
packetstormsecurity.com/files/167587/WSO2-Management-Console-Cross-Site-Scripting.html
docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1603
github.com/advisories/GHSA-89jf-3rw8-q5w2
github.com/wso2/carbon-kernel//commit/a6c7350f57fa0c0af819ce596b646f2629a77b32
github.com/wso2/carbon-kernel/pull/3145
Related
prion
prion
Cross site scripting
2022-04-21 02:15:00
nuclei
nuclei
WSO2 - Cross-Site Scripting
2022-05-09 10:25:53
cve
cve
CVE-2022-29548
2022-04-21 02:15:06
cvelist
cvelist
CVE-2022-29548
2022-04-21 00:00:00
nvd
nvd
CVE-2022-29548
2022-04-21 02:15:06
githubexploit
githubexploit
Exploit for Cross-site Scripting in Wso2 Api Manager
2022-04-24 06:00:25
zdt
zdt
osv
osv
CVE-2022-29548
2022-04-21 02:15:06
exploitdb
exploitdb
packetstorm
packetstorm
WSO2 Management Console Cross Site Scripting
2022-06-27 00:00:00