Threats tagged 'ghsa-xm8v-8xxf-7x94'

WSO2 Identity Server suffers from a vulnerability where the organization context is not validated during adaptive authentication flows. This allows a malicious actor with configuration privileges in one organization to trigger authentication logic in other organizations, bypassing authorization boundaries. The flaw can lead to unauthorized access, privilege escalation, and potential account takeover across organizations in multi-organization deployments.