Wso2 Wso2 Carbon Identity Recovery Management
2 CVEs affecting Wso2 Wso2 Carbon Identity Recovery Management. Latest disclosed: 2026-10-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10302 | Medium | 4.0 | 2026-08-06 | The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be inc… |
CVE-2024-4412 | Low | 2.7 | 2026-10-19 | The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to… |