medium4.8
CVE-2019-20443
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0.
Impact
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wso2 | Api Manager | Version 2.6.0 |
| Wso2 | Enterprise Integrator | Version 6.5.0 |
| Wso2 | Identity Server | Versions 5.7.0, 5.8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html
- https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636
- https://github.com/cybersecurityworks/Disclosed/issues/26
- https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html
- https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636
- https://github.com/cybersecurityworks/Disclosed/issues/26