CVE-2025-4760

mediumPriorität · verfolgen · 0EPSS 0.002 · 8. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.19% (8th) EPSS

CVSS 4.8 · medium

Is it mine?

31 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · bewertet 2026-10-27

An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript, which is later rendered in the browser when accessed by other users. A successful attack could result in redirection to malicious websites, unauthorized UI modifications, or exfiltration of browser-accessible data. However, session-related sensitive cookies are protected by the httpOnly flag, preventing session hijacking.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nsecondary · ENISA EU

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NsecondaryAusnutzbarkeit 1.7 · Auswirkung 2.7

v3.14.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nsecondary · OSV

v3.14.4mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-79USCWE-79US

betroffene Produkte (31)

Betroffene Produkte und Versionsbereiche.

WSO2 WSO2 API Control Plane4.5.0 → 4.5.0.8enisa_euvdEU
WSO2 WSO2 API Manageralle Versionenenisa_euvdEU
WSO2 WSO2 API Manager3.2.0 → 3.2.0.428enisa_euvdEU
WSO2 WSO2 API Manager3.2.1 → 3.2.1.48enisa_euvdEU
WSO2 WSO2 API Manager4.1.0 → 4.1.0.209enisa_euvdEU
WSO2 WSO2 API Manager4.2.0 → 4.2.0.145enisa_euvdEU
WSO2 WSO2 API Manager4.3.0 → 4.3.0.60enisa_euvdEU
WSO2 WSO2 API Manager4.4.0 → 4.4.0.23enisa_euvdEU
WSO2 WSO2 API Manager4.5.0 → 4.5.0.7enisa_euvdEU
WSO2 WSO2 Carbon API Management APIalle Versionenenisa_euvdEU
WSO2 WSO2 Carbon API Management API6.7.206 → 6.7.206.559enisa_euvdEU
WSO2 WSO2 Carbon API Management API6.7.210 → 6.7.210.48enisa_euvdEU
WSO2 WSO2 Carbon API Management API9.20.74 → 9.20.74.365enisa_euvdEU
WSO2 WSO2 Carbon API Management API9.28.116 → 9.28.116.321enisa_euvdEU
WSO2 WSO2 Carbon API Management API9.29.120 → 9.29.120.163enisa_euvdEU
WSO2 WSO2 Carbon API Management API9.30.67 → 9.30.67.80enisa_euvdEU
WSO2 WSO2 Carbon API Management API9.31.86 → 9.31.86.30enisa_euvdEU
WSO2 WSO2 Traffic Manager4.5.0 → 4.5.0.7enisa_euvdEU
WSO2 WSO2 Universal Gateway4.5.0 → 4.5.0.7enisa_euvdEU
wso2 api control plane= 4.5.0nvdUScpe:2.3:a:wso2:api_control_plane:*:*:*:*:*:*:*:*

20 von 31 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-cmjc-qp7j-xgwrWSO2 carbon-apimgt affected by an authenticated stored cross-site scripting (XSS) vulnerability2025-09-23ghsa · osvUS
An authenticated stored Cross-Site Scripting (XSS) vulnerability exists in WSO2 API Manager components (`carbon-apimgt`) due to insufficient validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document whose contents are later rendered in the UI for other users, leading to attacker-controlled script execution. Likely outcomes include redirection to malicious sites, unauthorized UI modifications, or exfiltration of data accessible to the browser; session hijacking is mitigated by the use of `HttpOnly` session cookies. To remediate, update to version 9.31.117 or above.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd osv NVD CVE.org MITRE

veröffentlicht 2025-09-23geändert 2026-10-18

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan