Advisories · Technology
WSO2 Carbon MagicLink Authenticator Module.
Every CVE that names WSO2 Carbon MagicLink Authenticator Module among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure
- WSO2 Identity Server
- WSO2 Carbon Identity Application Authentication Framework
- Information disclosure
- CWE-20
- CVSS 8.6 High
Denial-of-Service via Magic Link Authentication in WSO2 Identity Server Allows Service Unavailability
- WSO2 Identity Server
- WSO2 Carbon MagicLink Authenticator Module
- Denial of service
- CVSS 7.3 High
Account Lock Bypass via Magic Link or Pass Key Authentication in WSO2 Identity Server Allows Unauthorized Access
- WSO2 Identity Server
- WSO2 Carbon MagicLink Authenticator Module
- Broken access control