CVE-2025-1396
1 advisory.
Maven/org.wso2.carbon.identity.framework:org.wso2.carbon.identity.input.validation.mgt CVE-2025-1396: low 3.7
WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 7.8.103 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w82p-r9vw-4rg5
- https://nvd.nist.gov/vuln/detail/CVE-2025-1396
- https://github.com/wso2/carbon-identity-framework/commit/5d5d592882a0377c12e19967c6272ccce0fb18ab
- https://github.com/wso2/carbon-identity-framework
- https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-3983
CVE-2025-1396 · published · modified · JSON