Threats Tagged 'cve-2024-10302'
View all threats tagged with 'cve-2024-10302'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2024-10302'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2024-10302: CWE-20 Improper Input Validation in WSO2 WSO2 API Control PlaneCVE-2024-10302 0 The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes. Allowing unvalidated input into user claims can lead to various security risks. Malicious or malformed data injected during signup could be processed by other parts of the application, potentially enabling attacks such as content manipulation, redirection, user interface inconsistencies, unauthorized actions, and data exposure. The actual impact depends on how the compromised data is consumed and the privileges associated with the affected users. Join the discussion | CVE Database V5 | 08/06/2026, 09:30:30 UTC Added: 08/06/2026, 08:11:46 UTC |
Showing 1 to 1 of 1 result