CVE-2023-6838 (published 2023-12-15T09:50:52.147Z)
Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated requests.


Affected products: Vendor: WSO2
Product: WSO2 API Manager
Versions: 0, 3.1.0.0, 3.2.0.0