CVE-2018-8716

Mô tả

Tham khảo

• packetstormsecurity.com/files/147330/WSO2-Identity-Server-5.3.0-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2018/Apr/45 · Exploit
• securityfocus.com/archive/1/541954/100/0/threaded · Exploit
• exploit-db.com/exploits/44531 · Exploit
• sec-consult.com/en/blog/advisories/multiple-stored-xss-vulnerabilities-in-wso2-carbon-and-dashboard-server/index.html · Exploit

Lỗ hổng khác của identity server

• CVE-2025-12737CAO 8.4The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a mal…
• CVE-2026-0637TRUNG BÌNH 4.4When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging oc…
• CVE-2025-15039NGHIÊM TRỌNG 9.4The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication ste…
• CVE-2025-14779THẤP 3.8The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, whe…
• CVE-2025-13909TRUNG BÌNH 4.3The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic…