← back
CVE-2018-8716

CVE-2018-8716

EPSS 39.3%
WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/147330/WSO2-Identity-Server-5.3.0-Cross-Site-Scripting.htmlunverifiedcve_referencewww.exploit-db.com/exploits/44531/unverifiedexploitdbwww.exploit-db.com/exploits/44531unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/147330/WSO2-Identity-Server-5.3.0-Cross-Site-Scripting.htmlhttp://seclists.org/fulldisclosure/2018/Apr/45https://www.exploit-db.com/exploits/44531/https://www.sec-consult.com/en/blog/advisories/multiple-stored-xss-vulnerabilities-in-wso2-carbon-and-dashboard-server/index.htmlhttp://www.securityfocus.com/archive/1/541954/100/0/threaded