Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 11:24:04 +0000 EUVD-2026-45253 https://cve.radiocsirt.org/vuln/euvd-2026-45253 EUVD-2026-45253 https://cve.radiocsirt.org/vuln/euvd-2026-45253 fkie_cve-2020-24705 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24705 <p>An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Session Hijacking. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.</p> <p>An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Session Hijacking. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24705 GHSA-p3wm-5jfq-m55m https://cve.radiocsirt.org/vuln/ghsa-p3wm-5jfq-m55m <p>An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Session Hijacking. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.</p> <p>An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Session Hijacking. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.</p> https://cve.radiocsirt.org/vuln/ghsa-p3wm-5jfq-m55m gsd-2020-24705 https://cve.radiocsirt.org/vuln/gsd-2020-24705 gsd-2020-24705 https://cve.radiocsirt.org/vuln/gsd-2020-24705