WSO2 Carbon Management Console - XSS

Published on
10 Jan 2022
Vulnerability

Description

WSO2 Carbon Management Console is vulnerable to Reflected Cross-site scripting(XSS) vulnerability. By interfering with a request parameter in Management Console, a reflected XSS vulnerability can be exploited. Both authorised and unauthenticated queries can use this method.

Recommendations

  • Update WSO2 Carbon Management Console to the latest version
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days