Threats tagged 'ghsa-p462-ppqc-2w4x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2025-6508WSO2 API Manager · Cross-site Scripting Medium4.3EPSS 0.3%2026-08-06CVE Database V5CVE-2025-6508 CVE-2025-6508 is a medium severity cross-site scripting (XSS) vulnerability in the Swagger UI Try-out console of WSO2 API Manager. It allows loading an external Swagger API definition URL, which can override existing API definitions in the API Publisher portal. This can mislead users into interacting with maliciously altered API definitions, potentially exposing sensitive information or causing unintended backend requests. EPSS 0.3%Vulnerability CWE-79 #ghsa-p462-ppqc-2w4x	CVE Database V5	2026-08-06

Page 1 of 1