What is CVE-2025-0209?

CVE-2025-0209 is a medium-severity vulnerability in Wso2 Identity Server, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-09-23.

How severe is CVE-2025-0209?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Wso2 Identity Server

CVE-2025-0209

A reflected cross-site scripting (XSS) vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of arbitrary JavaScript in the victim's browser. This vulnerability could allow attackers to redirect users to malicious websites, modify the user interface, or exfiltrate data from the browser. However, session-related sensitive cookies are protected using the httpOnly flag, which mitigates the risk of session hijacking.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (12.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Wso2 Identity_server — versions 7.0.0
Wso2 Identity Server — versions 7.0.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

ed10eef1-636d-4fbe-9993-6890dfa878f8 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-0209?: CVE-2025-0209 is a medium-severity vulnerability in Wso2 Identity Server, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-09-23.
How severe is CVE-2025-0209?: Medium severity. CVSS v3 base score is 6.1 out of 10.