Lucene search
WSO2CVELIST:CVE-2023-6835HistoryDec 15, 2023 - 9:16 a.m.
CVE-2023-6835
2023-12-1509:16:27
CWE-20
WSO2
www.cve.org
wso2 products
forum feature
input validation
api rating
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
5.6 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "WSO2 API Manager",
"repo": "https://github.com/wso2/product-apim",
"vendor": "WSO2",
"versions": [
{
"lessThan": "2.2.0.0",
"status": "unknown",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "2.2.0.16",
"status": "affected",
"version": "2.2.0.0",
"versionType": "custom"
},
{
"lessThan": "2.5.0.17",
"status": "affected",
"version": "2.5.0.0",
"versionType": "custom"
},
{
"lessThan": "2.6.0.24",
"status": "affected",
"version": "2.6.0.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "WSO2 IoT Server",
"repo": "https://github.com/wso2/product-iots",
"vendor": "WSO2",
"versions": [
{
"lessThan": "3.3.1.0",
"status": "unknown",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "3.3.1.17",
"status": "affected",
"version": "3.3.1.0",
"versionType": "custom"
}
]
}
]Related
osv
osv
CVE-2023-6835
2023-12-15 10:15:09
WSO2 API Manager allows attackers to change the API rating
2023-12-15 12:30:25
nvd
nvd
CVE-2023-6835
2023-12-15 10:15:09
prion
prion
Input validation
2023-12-15 10:15:00
github
github
WSO2 API Manager allows attackers to change the API rating
2023-12-15 12:30:25
cve
cve
CVE-2023-6835
2023-12-15 10:15:09
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
5.6 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for CVELIST:CVE-2023-6835