CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-02
WSO2 Products Open Redirection Vulnerability Analysis and Mitigation Guide (CVE-2024-2372)
[Affected Scope] WSO2 components, including WSO2 Identity Server and API Manager, that accept user-supplied input for constructing redirection URLs
[Impact] Attackers can redirect users to arbitrary external domains, facilitating highly convincing phishing and social engineering attacks to harvest sensitive credentials
[Mitigation] Apply the latest security patches via WSO2 Update Utility as detailed in advisory WSO2-2024-3254, and enforce strict redirection whitelist validation