Threats tagged 'ghsa-257q-prhp-qgwp'

CVE-2025-12317 is a medium severity vulnerability in WSO2 Enterprise Integrator version 6.6.0 where the system does not invalidate authentication tokens after internal user roles are removed. This allows users to retain access privileges associated with revoked roles until tokens expire naturally, potentially enabling unauthorized actions or access to restricted resources.