CVE:CVE-2020-17453
CNNVD:CNNVD-202104-168
WSO2 Management Console是美国WSO2公司的一个应用软件。一个管理控制台。
WSO2 Management Console through 5.10 存在跨站脚本漏洞，该漏洞允许通过carbon admin login.jsp msgId参数进行XSS。
solution:Upgrade wso2 api_manager to a higher version than 3.2.0,and avoid the version (,3.2.0]; Upgrade wso2 api_manager_analytics to a higher version than 2.2.0,2.5.0,2.6.0,and avoid the version 2.2.0,2.5.0,2.6.0; Upgrade wso2 api_microgateway to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade wso2 enterprise_integrator to a higher version than 6.6.0,and avoid the version (,6.6.0]; Upgrade wso2 identity_server to a higher version than 5.10.0,and avoid the version (,5.10.0]; Upgrade wso2 identity_server_analytics to a higher version than 5.4.0,5.4.1,5.5.0,5.6.0,and avoid the version 5.4.0,5.4.1,5.5.0,5.6.0; Upgrade wso2 identity_server_as_key_manager to a higher version than 5.5.0,5.6.0,5.7.0,5.9.0,5.10.0,and avoid the version 5.5.0,5.6.0,5.7.0,5.9.0,5.10.0; Upgrade wso2 micro_integrator to a higher version than 1.0.0,and avoid the version 1.0.0