CVE-2023-32315 - Openfire Authentication Bypass This repository highlights a high security issue impacting various versions of Openfire. Openfire, a cross-platform real-time collaboration server utili ...

Continue Reading

December 15, 2023

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. In certain ...

Continue Reading

December 15, 2023

[Bleichenbacher timing attacks in the RSA decryption API - incomplete fix for...Read More ...

Continue Reading

December 15, 2023

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP...Read More ...

Continue Reading

December 15, 2023

Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order for this vulnerability to have any impact on your deployment, following condit ...

Continue Reading

December 15, 2023

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be...Read More ...

Continue Reading

December 15, 2023

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive...Read More ...

Continue Reading

December 15, 2023

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated...Read More ...

Continue Reading

December 15, 2023