Description
Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.
Remediation
References
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2021-1357/
Related Vulnerabilities
CVE-2020-6426 Vulnerability in maven package org.webjars.npm:electron
CVE-2023-33201 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15to18
CVE-2022-28157 Vulnerability in maven package com.surenpi.jenkins:phoenix-autotest
CVE-2011-3190 Vulnerability in maven package org.apache.tomcat:coyote
CVE-2018-1999029 Vulnerability in maven package org.jenkins-ci.plugins:shelve-project-plugin