CVEvulnerability

CVE-2023-6835

5.3 MEDIUM Published 2023-12-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-15
Last modified
2026-06-17
Assigner
ed10eef1-636d-4fbe-9993-6890dfa878f8
CVSS 3.1 (ed10eef1-636d-4fbe-9993-6890dfa878f8)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-20

Description

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.

Affected configurations

• wso2 api manager 2.2.0 • wso2 api manager 2.5.0 • wso2 api manager 2.6.0 • wso2 iot server 3.3.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References