org.wso2.carbon:org.wso2.carbon.ui vulnerabilities
1 known vulnerability in org.wso2.carbon:org.wso2.carbon.ui from WSO2. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
WSO2 Open Banking AM: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax c