Threats tagged 'ghsa-h8cr-hjjr-3c8v'

Multiple WSO2 products contain SSRF and reflected XSS vulnerabilities in the deprecated Try-It feature, accessible only to administrative users. The feature improperly validates user-supplied URLs, allowing server-side request forgery and reflected cross-site scripting in the admin's browser context. An attacker could trick an administrator into visiting a crafted link, causing the server to fetch malicious content and execute arbitrary JavaScript in the admin UI. Although session cookies are protected with HttpOnly, the XSS risk remains significant. SSRF could also enable internal network enumeration by querying internal services accessible from the affected product.