CVE record · 1 source
CVE-2026-11854
CVSS 6.1The authentication endpoint generates an error message that includes reflected data directly from the request without sufficient sanitization or…
- Vendor
- WSO2
- Product
- WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server
- CVSS v3.1
- 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The authentication endpoint generates an error message that includes reflected data directly from the request without sufficient sanitization or…
The authentication endpoint generates an error message that includes reflected data directly from the request without sufficient sanitization or encoding. This allows an attacker to inject malicious scripts that can be executed…