Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does not filter user inputs. By putting an XSS payload in place of a valid Owner Name, a modal box appears that writes an error message concatenated to the injected payload (without any form of data encoding). This can also be exploited via CSRF.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WSO2 API Manager 跨站脚本漏洞
Vulnerability Description
WSO2 API Manager是美国WSO2公司的一套API生命周期管理解决方案。 WSO2 API Manager 3.1.0版本及之前版本存在跨站脚本漏洞，该漏洞源于本在“publisher”组件的管理界面 owner POST参数中，该参数不过滤用户输入。
CVSS Information
N/A
Vulnerability Type
N/A