What is CVE-2024-6541?

CVE-2024-6541 is a medium-severity vulnerability in Wso2 Api Manager, classified under Improper Input Validation. CVSS score: 6.8/10. Published 2026-08-06.

How severe is CVE-2024-6541?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Improper input validation in Wso2 Api Manager

CVE-2024-6541

The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Wso2 Api Manager — versions 0, 3.2.0, 3.2.1
Wso2 Enterprise Integrator — versions 0, 6.6.0
Wso2 Micro Integrator — versions 0, 1.2.0, 4.1.0
Wso2 Wso2-synapse — versions 2.1.7.wso2v182, 2.1.7.wso2v143, 2.1.7.wso2v183

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

ed10eef1-636d-4fbe-9993-6890dfa878f8 (vendor-advisory)

Frequently asked questions

What is CVE-2024-6541?: CVE-2024-6541 is a medium-severity vulnerability in Wso2 Api Manager, classified under Improper Input Validation. CVSS score: 6.8/10. Published 2026-08-06.
How severe is CVE-2024-6541?: Medium severity. CVSS v3 base score is 6.8 out of 10.