{"action":"Upgrade org.wso2.identity.apps:authentication-portal to 2.4.4 or later.","affected":[{"fixed":"2.4.4","introduced":"0"}],"component":"org.wso2.identity.apps:authentication-portal","cve_ids":["CVE-2024-6429"],"ecosystem":"Maven","epss":0.00215,"exploited":false,"fixed_versions":["2.4.4"],"ghsa_id":"GHSA-r6f3-55wj-g9p3","id":"tcs_01M5N9B3RJPQXYHNVE6GN3ST7T","modified_at":"2026-09-10T03:50:28.894058433Z","published_at":"2025-09-23T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-r6f3-55wj-g9p3","https://nvd.nist.gov/vuln/detail/CVE-2024-6429","https://github.com/wso2/identity-apps/pull/6488","https://github.com/wso2/identity-apps/commit/75babf6b60f940f86bada7020e5d464ca95e47f2","https://github.com/wso2/identity-apps","https://github.com/wso2/identity-apps/releases/tag/@wso2is/identity-apps-core@2.4.4","https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-3490"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-r6f3-55wj-g9p3","url":"https://osv.dev/vulnerability/GHSA-r6f3-55wj-g9p3"}],"summary":"WSO2 Identity Server Apps allows content spoofing in logs"}