Input Validation Flaw in WSO2 Management Console Exposes Servers to Code Execution
CVE-2024-4457
Currently unrated
Key Information:
- Vendor
Wso2
- Vendor
- CVE Published:
- 18 October 2026
What is CVE-2024-4457?
The WSO2 Management Console possesses a vulnerability due to its improper validation of input concerning JDBC user store configurations. An attacker can exploit this weakness by delivering specially crafted input, potentially leading to arbitrary code execution on the impacted server. If successfully executed, this vulnerability could give an attacker the ability to run arbitrary commands with the privileges of the WSO2 product in use, posing a significant threat to system integrity and safety.
Affected Version(s)
WSO2 API Manager 3.1.0 < 3.1.0.275
WSO2 API Manager 3.2.0 < 3.2.0.365
WSO2 API Manager 3.2.1 < 3.2.1.19