Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.wso2.carbon.registry:carbon-registry

3 known vulnerabilities (1 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium, 2 low
Registry
Maven Central

Advisories 3

  • CVE-2023-6911Medium 4.8

    Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can…

    Affected: fixed in 4.7.37.

  • WSO2 carbon-registry Request Parameter cross site scripting

    Affected: fixed in 4.8.7.

  • WSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross site scripting

    Affected: fixed in 4.8.12.