CVE-2025-5350 (CNNVD-202510-3361)
中文标题:
WSO2 API Manager 安全漏洞
英文标题:
SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products
漏洞描述
中文描述:
WSO2 API Manager是美国WSO2公司的一套API生命周期管理解决方案。 WSO2 API Manager存在安全漏洞，该漏洞源于Try-It功能未正确验证用户提供的URL，可能导致服务端请求伪造和反射型跨站脚本攻击。
英文描述:
SSRF and Reflected XSS Vulnerabilities exist in multiple WSO2 products within the deprecated Try-It feature, which was accessible only to administrative users. This feature accepted user-supplied URLs without proper validation, leading to server-side request forgery (SSRF). Additionally, the retrieved content was directly reflected in the HTTP response, enabling reflected cross-site scripting (XSS) in the admin user's browser context. By tricking an administrator into accessing a crafted link, an attacker could force the server to fetch malicious content and reflect it into the admin’s browser, leading to arbitrary JavaScript execution for UI manipulation or data exfiltration. While session cookies are protected with the HttpOnly flag, the XSS still poses a significant security risk. Furthermore, SSRF can be used by a privileged user to query internal services, potentially aiding in internal network enumeration if the target endpoints are reachable from the affected product.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| WSO2 | WSO2 Identity Server | - | < 5.10.0.359 | - |
cpe:2.3:a:wso2:wso2_identity_server:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 Enterprise Integrator | - | < 6.6.0.218 | - |
cpe:2.3:a:wso2:wso2_enterprise_integrator:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 API Manager | - | < 3.1.0.332 | - |
cpe:2.3:a:wso2:wso2_api_manager:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 Universal Gateway | - | < 4.5.0.7 | - |
cpe:2.3:a:wso2:wso2_universal_gateway:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 Traffic Manager | - | < 4.5.0.7 | - |
cpe:2.3:a:wso2:wso2_traffic_manager:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 API Control Plane | - | < 4.5.0.7 | - |
cpe:2.3:a:wso2:wso2_api_control_plane:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 Open Banking AM | - | < 2.0.0.380 | - |
cpe:2.3:a:wso2:wso2_open_banking_am:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 Open Banking IAM | - | < 2.0.0.401 | - |
cpe:2.3:a:wso2:wso2_open_banking_iam:*:*:*:*:*:*:*:*
|
| WSO2 | WSO2 Identity Server as Key Manager | - | < 5.10.0.352 | - |
cpe:2.3:a:wso2:wso2_identity_server_as_key_manager:*:*:*:*:*:*:*:*
|
| WSO2 | org.wso2.carbon:org.wso2.carbon.ui | - | < 4.5.3.41 | - |
cpe:2.3:a:wso2:org.wso2.carbon:org.wso2.carbon.ui:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-5350 |
2025-11-11 15:23:32 | 2025-11-11 07:40:41 |
| NVD | nvd_CVE-2025-5350 |
2025-11-11 15:01:07 | 2025-11-11 07:48:28 |
| CNNVD | cnnvd_CNNVD-202510-3361 |
2025-11-11 15:12:30 | 2025-11-11 08:00:19 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202510-3361
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 36 -> 10
- data_sources: ['cve'] -> ['cve', 'nvd']