Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WSO2 Identity Server 跨站请求伪造漏洞
Vulnerability Description
WSO2 Identity Server是美国WSO2公司的一个开源的身份认证服务，它支持Information Cards、OpenID和XACML身份识别框架。 WSO2 Identity Server 5.1.0版本中的XACML flow功能存在跨站请求伪造漏洞。远程攻击者可通过向entitlement/eval-policy-submit.jsp文件发送请求利用该漏洞执行未授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A