CVEvulnerability

CVE-2023-6839

5.3 MEDIUM Published 2023-12-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-15
Last modified
2026-06-17
Assigner
ed10eef1-636d-4fbe-9993-6890dfa878f8
CVSS 3.1 (ed10eef1-636d-4fbe-9993-6890dfa878f8)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-209

Description

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response.

Affected configurations

• wso2 api manager 3.0.0 • wso2 api manager 3.1.0 • wso2 api manager 3.2.0 • wso2 api manager 4.0.0

Related

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References