medium5.4
CVE-2024-1440
WSO2 is vulnerable to Open Redirect through multi-option URL in its authentication endpoint
Impact
An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A malicious actor can craft a valid link that redirects users to an attacker-controlled site. By exploiting this vulnerability, an attacker may trick users into visiting a malicious page, enabling phishing attacks to harvest sensitive information or perform other harmful actions.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.endpoint.util | >= 6.0.0, < 7.0.111 | 7.0.111 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wso2 | Api Manager | Versions 3.1.0, 3.2.0, 4.0.0 |
| Wso2 | Identity Server | Versions 5.10.0, 5.11.0, 6.0.0, 6.1.0, 7.0.0 |
| Wso2 | Identity Server As Key Manager | Version 5.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3171/
- https://github.com/advisories/GHSA-cp5v-2hmc-3vjx
- https://nvd.nist.gov/vuln/detail/CVE-2024-1440
- https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3171
- https://github.com/wso2/carbon-identity-framework/pull/5580
- https://github.com/wso2/carbon-identity-framework/pull/5747
- https://github.com/wso2/carbon-identity-framework/commit/29ea34ada98649c4ae71aa92f1cbe87ce82164b9
- https://github.com/wso2/carbon-identity-framework/commit/7033924b6d53ff843529743b259f6c48f4e9c177