CVE-2024-6429
1 advisory.
Maven/org.wso2.identity.apps:authentication-portal CVE-2024-6429: medium 4.3
WSO2 Identity Server Apps allows content spoofing in logs
Action: Upgrade org.wso2.identity.apps:authentication-portal to 2.4.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.4 | - |
Fixed versions
| 2.4.4 |
Sources
- osv: GHSA-r6f3-55wj-g9p3
- https://nvd.nist.gov/vuln/detail/CVE-2024-6429
- https://github.com/wso2/identity-apps/pull/6488
- https://github.com/wso2/identity-apps/commit/75babf6b60f940f86bada7020e5d464ca95e47f2
- https://github.com/wso2/identity-apps
- https://github.com/wso2/identity-apps/releases/tag/@wso2is/identity-apps-core@2.4.4
- https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-3490
CVE-2024-6429 · published · modified · JSON