CVE-2023-6911

Summary

CVE-2023-6911 is a newly disclosed vulnerability affecting multiple WSO2 products. The issue stems from improper output encoding in the Registry feature of the Management Console, enabling a Stored Cross Site Scripting (XSS) attack. An attacker can inject malicious payloads into this feature, potentially gaining unauthorized access to user sessions or stealing sensitive data. This vulnerability poses a significant risk to organizations using the affected WSO2 products and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.