https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 15:15:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245479 EUVD-2026-245479 https://cve.radiocsirt.org/vuln/euvd-2026-245479 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3511 <p>An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.</p> <p>Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.</p> <p>An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.</p> <p>Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3511 https://cve.radiocsirt.org/vuln/ghsa-w2r3-453h-7v25 <p>An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.</p> <p>Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.</p> <p>An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.</p> <p>Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.</p> https://cve.radiocsirt.org/vuln/ghsa-w2r3-453h-7v25 https://cve.radiocsirt.org/vuln/gsd-2024-3511 gsd-2024-3511 https://cve.radiocsirt.org/vuln/gsd-2024-3511