CVE-2025-13394

Summary

The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.

An attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines.

Affected Software

VendorProductVersion RangeStatus
WSO2WSO2 Identity Server0 < 5.10.0unknown
WSO2WSO2 Identity Server5.10.0 < 5.10.0.381affected
WSO2WSO2 Identity Server5.11.0 < 5.11.0.428affected
WSO2WSO2 Identity Server6.0.0 < 6.0.0.255affected
WSO2WSO2 Identity Server6.1.0 < 6.1.0.256affected
WSO2WSO2 Identity Server7.0.0 < 7.0.0.133affected
WSO2WSO2 Identity Server7.1.0 < 7.1.0.41affected
WSO2WSO2 Identity Server7.2.0 < 7.2.0.3affected
WSO2WSO2 API Manager0 < 3.1.0unknown
WSO2WSO2 API Manager3.1.0 < 3.1.0.352affected
WSO2WSO2 API Manager3.2.0 < 3.2.0.456affected
WSO2WSO2 API Manager3.2.1 < 3.2.1.75affected
WSO2WSO2 API Manager4.0.0 < 4.0.0.376affected
WSO2WSO2 API Manager4.1.0 < 4.1.0.239affected
WSO2WSO2 API Manager4.2.0 < 4.2.0.179affected
WSO2WSO2 API Manager4.3.0 < 4.3.0.91affected
WSO2WSO2 API Manager4.4.0 < 4.4.0.55affected
WSO2WSO2 API Manager4.5.0 < 4.5.0.38affected
WSO2WSO2 API Manager4.6.0 < 4.6.0.3affected
WSO2WSO2 Open Banking IAM0 < 2.0.0unknown
WSO2WSO2 Open Banking IAM2.0.0 < 2.0.0.421affected
WSO2WSO2 Open Banking AM0 < 2.0.0unknown
WSO2WSO2 Open Banking AM2.0.0 < 2.0.0.401affected
WSO2WSO2 Identity Server as Key Manager0 < 5.10.0unknown
WSO2WSO2 Identity Server as Key Manager5.10.0 < 5.10.0.372affected
WSO2WSO2 API Control Plane0 < 4.5.0unknown
WSO2WSO2 API Control Plane4.5.0 < 4.5.0.39affected
WSO2WSO2 API Control Plane4.6.0 < 4.6.0.3affected
WSO2WSO2 Universal Gateway0 < 4.5.0unknown
WSO2WSO2 Universal Gateway4.5.0 < 4.5.0.37affected
WSO2WSO2 Universal Gateway4.6.0 < 4.6.0.3affected
WSO2WSO2 Traffic Manager0 < 4.5.0unknown
WSO2WSO2 Traffic Manager4.5.0 < 4.5.0.37affected
WSO2WSO2 Traffic Manager4.6.0 < 4.6.0.3affected
WSO2WSO2 Enterprise Integrator0 < 6.6.0unknown
WSO2WSO2 Enterprise Integrator6.6.0 < 6.6.0.227affected
WSO2WSO2 Carbon Identity Entitlement UI5.17.5 < 5.17.5.331affected
WSO2WSO2 Carbon Identity Entitlement UI5.18.187 < 5.18.187.329affected
WSO2WSO2 Carbon Identity Entitlement UI5.23.8 < 5.23.8.210affected
WSO2WSO2 Carbon Identity Entitlement UI5.25.92 < 5.25.92.166affected
WSO2WSO2 Carbon Identity Entitlement UI7.0.78 < 7.0.78.157affected
WSO2WSO2 Carbon Identity Entitlement UIx <= *unaffected
WSO2WSO2 Carbon Identity Management UI15.17.5 < 5.17.5.330affected
WSO2WSO2 Carbon Identity Management UI15.17.5 < 5.17.5.331affected
WSO2WSO2 Carbon Identity Management UI15.17.118 < 5.17.118.22affected
WSO2WSO2 Carbon Identity Management UI15.18.187 < 5.18.187.328affected
WSO2WSO2 Carbon Identity Management UI15.18.187 < 5.18.187.329affected
WSO2WSO2 Carbon Identity Management UI15.18.248 < 5.18.248.31affected
WSO2WSO2 Carbon Identity Management UI15.23.8 < 5.23.8.210affected
WSO2WSO2 Carbon Identity Management UI15.24.8 < 5.24.8.26affected
WSO2WSO2 Carbon Identity Management UI15.25.92 < 5.25.92.166affected
WSO2WSO2 Carbon Identity Management UI15.25.705 < 5.25.705.21affected
WSO2WSO2 Carbon Identity Management UI15.25.713 < 5.25.713.10affected
WSO2WSO2 Carbon Identity Management UI15.25.724 < 5.25.724.5affected
WSO2WSO2 Carbon Identity Management UI15.25.736 < 5.25.736.1affected
WSO2WSO2 Carbon Identity Management UI17.0.78 < 7.0.78.157affected
WSO2WSO2 Carbon Identity Management UI17.8.23 < 7.8.23.67affected
WSO2WSO2 Carbon Identity Management UI17.8.586 < 7.8.586.7affected
WSO2WSO2 Carbon Identity Management UI1x <= *unaffected
WSO2WSO2 Carbon Identity User Store Configuration UI5.14.127 < 5.14.127.13affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.17.5 < 5.17.5.330affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.17.5 < 5.17.5.331affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.17.118 < 5.17.118.22affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.18.187 < 5.18.187.328affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.18.187 < 5.18.187.329affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.18.248 < 5.18.248.31affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.23.8 < 5.23.8.210affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.24.8 < 5.24.8.26affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.25.92 < 5.25.92.166affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.25.705 < 5.25.705.21affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.25.713 < 5.25.713.10affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.25.724 < 5.25.724.5affected
WSO2WSO2 Carbon Identity User Store Configuration UI5.25.736 < 5.25.736.1affected
WSO2WSO2 Carbon Identity User Store Configuration UI7.0.78 < 7.0.78.157affected
WSO2WSO2 Carbon Identity User Store Configuration UI7.8.23 < 7.8.23.67affected
WSO2WSO2 Carbon Identity User Store Configuration UI7.8.586 < 7.8.586.7affected
WSO2WSO2 Carbon Identity User Store Configuration UIx <= *unaffected
WSO2WSO2 Carbon Registry Profiles UI4.7.32 < 4.7.32.18affected
WSO2WSO2 Carbon Registry Profiles UI4.7.33 < 4.7.33.16affected
WSO2WSO2 Carbon Registry Profiles UI4.8.9 < 4.8.9.16affected
WSO2WSO2 Carbon Registry Profiles UI4.8.12 < 4.8.12.8affected
WSO2WSO2 Carbon Registry Profiles UI4.8.24 < 4.8.24.6affected
WSO2WSO2 Carbon Registry Profiles UI4.8.43 < 4.8.43.4affected
WSO2WSO2 Carbon Registry Profiles UI4.8.50 < 4.8.50.3affected
WSO2WSO2 Carbon Registry Profiles UIx <= *unaffected
WSO2WSO2 Carbon Registry Properties UI4.7.24 < 4.7.24.11affected
WSO2WSO2 Carbon Registry Properties UI4.7.32 < 4.7.32.16affected
WSO2WSO2 Carbon Registry Properties UI4.7.32 < 4.7.32.18affected
WSO2WSO2 Carbon Registry Properties UI4.7.33 < 4.7.33.16affected
WSO2WSO2 Carbon Registry Properties UI4.7.35 < 4.7.35.15affected
WSO2WSO2 Carbon Registry Properties UI4.7.39 < 4.7.39.12affected
WSO2WSO2 Carbon Registry Properties UI4.7.51 < 4.7.51.8affected
WSO2WSO2 Carbon Registry Properties UI4.8.3 < 4.8.3.10affected
WSO2WSO2 Carbon Registry Properties UI4.8.9 < 4.8.9.16affected
WSO2WSO2 Carbon Registry Properties UI4.8.12 < 4.8.12.8affected
WSO2WSO2 Carbon Registry Properties UI4.8.13 < 4.8.13.9affected
WSO2WSO2 Carbon Registry Properties UI4.8.24 < 4.8.24.6affected
WSO2WSO2 Carbon Registry Properties UI4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Registry Properties UI4.8.36 < 4.8.36.2affected
WSO2WSO2 Carbon Registry Properties UI4.8.43 < 4.8.43.2affected
WSO2WSO2 Carbon Registry Properties UI4.8.43 < 4.8.43.4affected
WSO2WSO2 Carbon Registry Properties UI4.8.50 < 4.8.50.1affected
WSO2WSO2 Carbon Registry Properties UI4.8.50 < 4.8.50.3affected
WSO2WSO2 Carbon Registry Properties UIx <= *unaffected
WSO2WSO2 Carbon Registry Resources UI4.7.24 < 4.7.24.11affected
WSO2WSO2 Carbon Registry Resources UI4.7.32 < 4.7.32.16affected
WSO2WSO2 Carbon Registry Resources UI4.7.32 < 4.7.32.18affected
WSO2WSO2 Carbon Registry Resources UI4.7.33 < 4.7.33.16affected
WSO2WSO2 Carbon Registry Resources UI4.7.35 < 4.7.35.15affected
WSO2WSO2 Carbon Registry Resources UI4.7.39 < 4.7.39.12affected
WSO2WSO2 Carbon Registry Resources UI4.7.51 < 4.7.51.8affected
WSO2WSO2 Carbon Registry Resources UI4.8.3 < 4.8.3.10affected
WSO2WSO2 Carbon Registry Resources UI4.8.9 < 4.8.9.16affected
WSO2WSO2 Carbon Registry Resources UI4.8.12 < 4.8.12.8affected
WSO2WSO2 Carbon Registry Resources UI4.8.13 < 4.8.13.9affected
WSO2WSO2 Carbon Registry Resources UI4.8.24 < 4.8.24.6affected
WSO2WSO2 Carbon Registry Resources UI4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Registry Resources UI4.8.36 < 4.8.36.2affected
WSO2WSO2 Carbon Registry Resources UI4.8.43 < 4.8.43.2affected
WSO2WSO2 Carbon Registry Resources UI4.8.43 < 4.8.43.4affected
WSO2WSO2 Carbon Registry Resources UI4.8.50 < 4.8.50.1affected
WSO2WSO2 Carbon Registry Resources UI4.8.50 < 4.8.50.3affected
WSO2WSO2 Carbon Registry Resources UIx <= *unaffected
WSO2WSO2 Carbon Registry Search UI4.7.24 < 4.7.24.11affected
WSO2WSO2 Carbon Registry Search UI4.7.32 < 4.7.32.16affected
WSO2WSO2 Carbon Registry Search UI4.7.32 < 4.7.32.18affected
WSO2WSO2 Carbon Registry Search UI4.7.33 < 4.7.33.16affected
WSO2WSO2 Carbon Registry Search UI4.7.35 < 4.7.35.15affected
WSO2WSO2 Carbon Registry Search UI4.7.39 < 4.7.39.12affected
WSO2WSO2 Carbon Registry Search UI4.7.51 < 4.7.51.8affected
WSO2WSO2 Carbon Registry Search UI4.8.3 < 4.8.3.10affected
WSO2WSO2 Carbon Registry Search UI4.8.9 < 4.8.9.16affected
WSO2WSO2 Carbon Registry Search UI4.8.12 < 4.8.12.8affected
WSO2WSO2 Carbon Registry Search UI4.8.13 < 4.8.13.9affected
WSO2WSO2 Carbon Registry Search UI4.8.24 < 4.8.24.6affected
WSO2WSO2 Carbon Registry Search UIx <= *unaffected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.8.1 < 4.8.1.6affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.8.7 < 4.8.7.3affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.8 < 4.9.8.7affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.10 < 4.9.10.7affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.10 < 4.9.10.8affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.20 < 4.9.20.5affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.27 < 4.9.27.1affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.31 < 4.9.31.1affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.34 < 4.9.34.1affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.9.42 < 4.9.42.1affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.11.0 < 4.11.0.7affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.11.19 < 4.11.19.4affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.11.34 < 4.11.34.3affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operations4.11.45 < 4.11.45.1affected
WSO2WSO2 Stratos User Interface For Tenant CRUD Operationsx <= *unaffected
WSO2WSO2 Stratos SSO Redirector UI Component4.8.1 < 4.8.1.6affected
WSO2WSO2 Stratos SSO Redirector UI Componentx <= *unaffected
WSO2WSO2 Carbon Email Verification UI4.7.19 < 4.7.19.14affected
WSO2WSO2 Carbon Email Verification UIx <= *unaffected
WSO2WSO2 Carbon Event Simulator UI2.2.11 < 2.2.11.1affected
WSO2WSO2 Carbon Event Simulator UI2.2.14 < 2.2.14.11affected
WSO2WSO2 Carbon Event Simulator UI2.2.14 < 2.2.14.12affected
WSO2WSO2 Carbon Event Simulator UI2.2.17 < 2.2.17.5affected
WSO2WSO2 Carbon Event Simulator UI2.3.1 < 2.3.1.4affected
WSO2WSO2 Carbon Event Simulator UI2.3.5 < 2.3.5.6affected
WSO2WSO2 Carbon Event Simulator UIx <= *unaffected
WSO2WSO2 Carbon Execution Manager UI5.2.24 < 5.2.24.10affected
WSO2WSO2 Carbon Execution Manager UI5.2.26 < 5.2.26.22affected
WSO2WSO2 Carbon Execution Manager UI5.2.34 < 5.2.34.12affected
WSO2WSO2 Carbon Execution Manager UI5.2.41 < 5.2.41.7affected
WSO2WSO2 Carbon Execution Manager UI5.2.57 < 5.2.57.10affected
WSO2WSO2 Carbon Execution Manager UI5.3.5 < 5.3.5.9affected
WSO2WSO2 Carbon Execution Manager UIx <= *unaffected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UI4.8.14 < 4.8.14.4affected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UI4.8.19 < 4.8.19.8affected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UI4.8.21 < 4.8.21.10affected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UI4.8.28 < 4.8.28.4affected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UI4.8.30 < 4.8.30.6affected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UI4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Governance Custom Lifecycle Checklist UIx <= *unaffected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.14 < 4.8.14.4affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.19 < 4.8.19.8affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.21 < 4.8.21.10affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.28 < 4.8.28.4affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.30 < 4.8.30.6affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.33 < 4.8.33.4affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.34 < 4.8.34.5affected
WSO2WSO2 Carbon Governance Generic Artifact User Interface4.8.37 < 4.8.37.4affected
WSO2WSO2 Carbon Governance Generic Artifact User Interfacex <= *unaffected
WSO2WSO2 Carbon Governance Life Cycles User Interface4.8.14 < 4.8.14.4affected
WSO2WSO2 Carbon Governance Life Cycles User Interface4.8.19 < 4.8.19.8affected
WSO2WSO2 Carbon Governance Life Cycles User Interface4.8.21 < 4.8.21.10affected
WSO2WSO2 Carbon Governance Life Cycles User Interface4.8.28 < 4.8.28.4affected
WSO2WSO2 Carbon Governance Life Cycles User Interface4.8.30 < 4.8.30.6affected
WSO2WSO2 Carbon Governance Life Cycles User Interface4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Governance Life Cycles User Interfacex <= *unaffected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.14 < 4.8.14.4affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.19 < 4.8.19.8affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.21 < 4.8.21.10affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.28 < 4.8.28.4affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.30 < 4.8.30.6affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.33 < 4.8.33.4affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.34 < 4.8.34.5affected
WSO2WSO2 Carbon Governance WSDL Tool UI4.8.37 < 4.8.37.4affected
WSO2WSO2 Carbon Governance WSDL Tool UIx <= *unaffected
WSO2WSO2 Carbon New Data Sources UI4.7.19 < 4.7.19.13affected
WSO2WSO2 Carbon New Data Sources UI4.7.24 < 4.7.24.5affected
WSO2WSO2 Carbon New Data Sources UI4.7.32 < 4.7.32.10affected
WSO2WSO2 Carbon New Data Sources UI4.7.35 < 4.7.35.13affected
WSO2WSO2 Carbon New Data Sources UI4.7.49 < 4.7.49.7affected
WSO2WSO2 Carbon New Data Sources UI4.7.52 < 4.7.52.5affected
WSO2WSO2 Carbon New Data Sources UI4.9.2 < 4.9.2.8affected
WSO2WSO2 Carbon New Data Sources UI4.9.11 < 4.9.11.2affected
WSO2WSO2 Carbon New Data Sources UI4.9.18 < 4.9.18.1affected
WSO2WSO2 Carbon New Data Sources UIx <= *unaffected
WSO2WSO2 Carbon Registry Info UI24.7.32 < 4.7.32.16affected
WSO2WSO2 Carbon Registry Info UI24.7.35 < 4.7.35.15affected
WSO2WSO2 Carbon Registry Info UI24.7.39 < 4.7.39.12affected
WSO2WSO2 Carbon Registry Info UI24.7.51 < 4.7.51.8affected
WSO2WSO2 Carbon Registry Info UI24.8.3 < 4.8.3.10affected
WSO2WSO2 Carbon Registry Info UI24.8.13 < 4.8.13.9affected
WSO2WSO2 Carbon Registry Info UI24.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Registry Info UI24.8.36 < 4.8.36.2affected
WSO2WSO2 Carbon Registry Info UI24.8.43 < 4.8.43.2affected
WSO2WSO2 Carbon Registry Info UI24.8.50 < 4.8.50.1affected
WSO2WSO2 Carbon Registry Info UI2x <= *unaffected
WSO2WSO2 Carbon Registry Relations UI4.7.24 < 4.7.24.11affected
WSO2WSO2 Carbon Registry Relations UI4.7.32 < 4.7.32.16affected
WSO2WSO2 Carbon Registry Relations UI4.7.35 < 4.7.35.15affected
WSO2WSO2 Carbon Registry Relations UI4.7.39 < 4.7.39.12affected
WSO2WSO2 Carbon Registry Relations UI4.7.51 < 4.7.51.8affected
WSO2WSO2 Carbon Registry Relations UI4.8.3 < 4.8.3.10affected
WSO2WSO2 Carbon Registry Relations UI4.8.13 < 4.8.13.9affected
WSO2WSO2 Carbon Registry Relations UI4.8.32 < 4.8.32.4affected
WSO2WSO2 Carbon Registry Relations UI4.8.36 < 4.8.36.2affected
WSO2WSO2 Carbon Registry Relations UI4.8.43 < 4.8.43.2affected
WSO2WSO2 Carbon Registry Relations UI4.8.50 < 4.8.50.1affected
WSO2WSO2 Carbon Registry Relations UIx <= *unaffected
WSO2WSO2 Carbon Registry Indexing4.7 < 4.7.24affected
WSO2WSO2 Carbon Registry Indexingx <= *unaffected
WSO2WSO2 Carbon Security UI5.14 < 5.14.127affected
WSO2WSO2 Carbon Security UIx <= *unaffected
WSO2WSO2 Carbon Component Andes Event UI3.3.12 < 3.3.12.3affected
WSO2WSO2 Carbon Component Andes Event UIx <= *unaffected
WSO2WSO2 Carbon Component Andes UI13.3.12 < 3.3.12.3affected
WSO2WSO2 Carbon Component Andes UI1x <= *unaffected
WSO2WSO2 Carbon HL7 Business Messaging Store UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon HL7 Business Messaging Store UIx <= *unaffected
WSO2WSO2 Carbon Endpoint Editor UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Endpoint Editor UIx <= *unaffected
WSO2WSO2 Carbon Publish Event Mediator Configuration UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Publish Event Mediator Configuration UIx <= *unaffected
WSO2WSO2 Carbon Eventing UI4.7.19 < 4.7.19.13affected
WSO2WSO2 Carbon Eventing UIx <= *unaffected
WSO2WSO2 Carbon HumanTask UI4.5.27 < 4.5.27.10affected
WSO2WSO2 Carbon HumanTask UIx <= *unaffected
WSO2WSO2 Carbon Logging UI4.7.19 < 4.7.19.13affected
WSO2WSO2 Carbon Logging UI4.7.24 < 4.7.24.5affected
WSO2WSO2 Carbon Logging UI4.7.32 < 4.7.32.10affected
WSO2WSO2 Carbon Logging UI4.7.52 < 4.7.52.5affected
WSO2WSO2 Carbon Logging UIx <= *unaffected
WSO2WSO2 Carbon Template Editor UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Template Editor UIx <= *unaffected
WSO2WSO2 Carbon Command Mediator UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Command Mediator UIx <= *unaffected
WSO2WSO2 Carbon Rule Mediator UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Rule Mediator UIx <= *unaffected
WSO2WSO2 Carbon Throttle Mediator UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Throttle Mediator UIx <= *unaffected
WSO2WSO2 Carbon Tasks Core4.7.19 < 4.7.19.13affected
WSO2WSO2 Carbon Tasks Corex <= *unaffected
WSO2WSO2 Carbon Rest API Admin UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Rest API Admin UIx <= *unaffected
WSO2WSO2 Carbon Sequence Editor UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Sequence Editor UIx <= *unaffected
WSO2WSO2 Carbon Task UI4.7.30 < 4.7.30.53affected
WSO2WSO2 Carbon Task UIx <= *unaffected
WSO2WSO2 Carbon Governance4.8.37 < 4.8.37.4affected
WSO2WSO2 Carbon Governancex <= *unaffected

Weaknesses

  • CWE-352: CWE-352: Cross-Site Request Forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References