Security Advisory

CVE-2019-20435

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-27 23:38:34

Last updated 2024-08-05 02:39:10

Assigner mitre

CVSS score 3.5

State PUBLISHED

Description

An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter.

← Browse all CVEs View on cve.org ↗