CVE-2021-36760

Опубликовано: 07 дек. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)

Ссылки

https://docs.wso2.com/display/Security/2021+Advisories
Vendor Advisory
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1314
Vendor Advisory
https://docs.wso2.com/display/Security/2021+Advisories
Vendor Advisory
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1314
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wso2:api_manager:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:api_manager:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:api_manager:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:api_manager:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server:5.7.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server:5.8.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server:5.9.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server:5.10.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server:5.11.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.6.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.7.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.9.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:iot_server:3.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00668

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-pgw2-c4q3-g5cf

github

около 4 лет назад