Description
An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API Manager Analytics 2.2.0, API Microgateway 2.2.0, Data Analytics Server 3.2.0, Enterprise Integrator through 6.6.0, IS as Key Manager 5.5.0, Identity Server 5.5.0 and 5.8.0, Identity Server Analytics 5.5.0, and IoT Server 3.3.0 and 3.3.1.
Remediation
References
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2020/WSO2-2020-0685/
Related Vulnerabilities
CVE-2019-10335 Vulnerability in maven package org.jenkins-ci.plugins:electricflow
CVE-2019-0213 Vulnerability in maven package org.apache.archiva:archiva
CVE-2018-19056 Vulnerability in npm package editor.md
CVE-2019-10090 Vulnerability in maven package org.apache.jspwiki:jspwiki-war
CVE-2019-10432 Vulnerability in maven package org.jenkins-ci.plugins:htmlpublisher