PT-2021-21342 · Wso2 · Wso2 Identity Server

Published 2021-12-07 · Updated 2021-12-09 · CVE-2021-36760

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server version 5.7.0

Description A DOM-Based XSS attack is possible in the account recovery endpoint, affecting the callback parameter by modifying the URL that precedes it. Once the username or password reset procedure is completed, the JavaScript code will be executed. Additionally, there is an open redirect issue in the recoverpassword.do endpoint for a similar reason.

Recommendations For WSO2 Identity Server version 5.7.0, consider disabling the recoverpassword.do endpoint until a patch is available to prevent potential DOM-Based XSS attacks. Restrict access to the accountrecoveryendpoint to minimize the risk of exploitation. Avoid using the callback parameter in the affected endpoint until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-36760

Affected Products

Wso2 Identity Server

References · 6

• https://osv.dev/vulnerability/CVE-2021-36760 · Vendor Advisory
• https://docs.wso2.com/display/Security/2021+Advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36760 · Security Note
• https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1314 · Vendor Advisory
• https://t.me/cvenotify/24383 · Telegram Post
• https://t.me/cibsecurity/33529 · Telegram Post