org.wso2.carbon.identity.api.server.keystore.management.common vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.identity.api.server.keystore.management.common package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-13647Medium· 5.8

4d ago

Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths

The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header. Success…

▾ SunlitWSO2 · WSO2 Identity ServerEPSS 0.18%via CVEORG