CVE-2021-36760
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)
En el archivo accountrecoveryendpoint/recoverpassword.do en WSO2 Identity Server versión 5.7.0, es posible llevar a cabo un ataque de tipo XSS basado en DOM que afecta al parámetro callback modificando la URL que precede al parámetro callback. Una vez que el procedimiento de restablecimiento del nombre de usuario o de la contraseña ha sido completado, el código JavaScript será ejecutado. (recoverpassword.do también presenta un problema de redireccionamiento abierto por un motivo similar)
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-07-16 CVE Reserved
- 2021-12-07 CVE Published
- 2024-08-04 CVE Updated
- 2024-08-22 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.wso2.com/display/Security/2021+Advisories | 2021-12-09 | |
| https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1314 | 2021-12-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wso2 Search vendor "Wso2" | Api Manager Search vendor "Wso2" for product "Api Manager" | 3.0.0 Search vendor "Wso2" for product "Api Manager" and version "3.0.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Api Manager Search vendor "Wso2" for product "Api Manager" | 3.1.0 Search vendor "Wso2" for product "Api Manager" and version "3.1.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Api Manager Search vendor "Wso2" for product "Api Manager" | 3.2.0 Search vendor "Wso2" for product "Api Manager" and version "3.2.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Api Manager Search vendor "Wso2" for product "Api Manager" | 4.0.0 Search vendor "Wso2" for product "Api Manager" and version "4.0.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server Search vendor "Wso2" for product "Identity Server" | 5.7.0 Search vendor "Wso2" for product "Identity Server" and version "5.7.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server Search vendor "Wso2" for product "Identity Server" | 5.8.0 Search vendor "Wso2" for product "Identity Server" and version "5.8.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server Search vendor "Wso2" for product "Identity Server" | 5.9.0 Search vendor "Wso2" for product "Identity Server" and version "5.9.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server Search vendor "Wso2" for product "Identity Server" | 5.10.0 Search vendor "Wso2" for product "Identity Server" and version "5.10.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server Search vendor "Wso2" for product "Identity Server" | 5.11.0 Search vendor "Wso2" for product "Identity Server" and version "5.11.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server As Key Manager Search vendor "Wso2" for product "Identity Server As Key Manager" | 5.3.0 Search vendor "Wso2" for product "Identity Server As Key Manager" and version "5.3.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server As Key Manager Search vendor "Wso2" for product "Identity Server As Key Manager" | 5.5.0 Search vendor "Wso2" for product "Identity Server As Key Manager" and version "5.5.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server As Key Manager Search vendor "Wso2" for product "Identity Server As Key Manager" | 5.6.0 Search vendor "Wso2" for product "Identity Server As Key Manager" and version "5.6.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server As Key Manager Search vendor "Wso2" for product "Identity Server As Key Manager" | 5.7.0 Search vendor "Wso2" for product "Identity Server As Key Manager" and version "5.7.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server As Key Manager Search vendor "Wso2" for product "Identity Server As Key Manager" | 5.9.0 Search vendor "Wso2" for product "Identity Server As Key Manager" and version "5.9.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Identity Server As Key Manager Search vendor "Wso2" for product "Identity Server As Key Manager" | 5.10.0 Search vendor "Wso2" for product "Identity Server As Key Manager" and version "5.10.0" | - |
Affected
| ||||||
| Wso2 Search vendor "Wso2" | Iot Server Search vendor "Wso2" for product "Iot Server" | 3.3.1 Search vendor "Wso2" for product "Iot Server" and version "3.3.1" | - |
Affected
| ||||||