org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature@6.4.14 vulnerabilities
licenses detected
- [1.3.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature is an a feature that contains the core bundles required for API management back end. Affected versions of this package are vulnerable to Open Redirect via the API store. How to fix Open Redirect? A fix was pushed into the | [0,) |
org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature is an a feature that contains the core bundles required for API management back end. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). An attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of the victim while the hacker maintains access. How to fix Cross-site Scripting (XSS)? Upgrade | [,6.7.123) |