org.wso2.is:identity-server-parent@7.0.0-beta6 vulnerabilities
latest version
6.1.0
first published
7 years ago
latest version published
2 years ago
licenses detected
- [5.4.0-alpha4,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.wso2.is:identity-server-parent package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.wso2.is:identity-server-parent is an open source Identity and Access Management solution federating and managing identities across both enterprise and cloud service environments. Affected versions of this package are vulnerable to Incorrect Authorization that allows an attacker in possession of a valid admin refresh token to gain unauthorized access to API resources by using a refresh token instead of the expected access token. Note: This vulnerability has been patched in API Manager 4.0.0 patch 275, 4.1.0 patch 153, and 4.2.0 patch 83; and Identity Server 5.11.0 patch 326, 6.0.0 patch 172, and 6.1.0 patch 130. How to fix Incorrect Authorization? There is no fixed version for | [5.11.0-alpha,) |
org.wso2.is:identity-server-parent is an open source Identity and Access Management solution federating and managing identities across both enterprise and cloud service environments. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in How to fix Cross-site Scripting (XSS)? There is no fixed version for | [0,) |