User Input Validation Flaw in WSO2 API Manager by WSO2

CVE-2024-4989

What is CVE-2024-4989?

A security flaw in WSO2 API Manager allows the callback URL parameter to be manipulated by external actors due to insufficient validation of user-supplied input. This vulnerability can lead to unintended redirection of users to malicious websites. Attackers may exploit this weakness in conjunction with social engineering tactics, enabling them to deceive users into engaging with harmful links. This poses significant risks, including potential phishing attacks aimed at gathering sensitive information or inflicting other forms of damage.

References