{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"9.0.78"}],"component":"org.wso2.carbon.apimgt:forum","cve_ids":["CVE-2023-6835"],"ecosystem":"Maven","epss":0.0052,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w7rx-824v-rgx5","id":"tcs_01M5N9FWADSWE33AB3SEJ14B5V","modified_at":"2024-02-21T05:32:21.585357Z","published_at":"2023-12-15T12:30:25Z","references":["https://osv.dev/vulnerability/GHSA-w7rx-824v-rgx5","https://nvd.nist.gov/vuln/detail/CVE-2023-6835","https://github.com/wso2/carbon-apimgt/commit/2e9591b72bc286dfcd22b57768e984d867c902ba","https://github.com/wso2/carbon-apimgt","https://github.com/wso2/carbon-apimgt/blob/81e0c0b8ed0bd2dace1e9006be21acbb731c835e/components/forum/org.wso2.carbon.forum/src/main/java/org/wso2/carbon/forum/registry/RegistryForumManager.java#L762","https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2021-1357"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-w7rx-824v-rgx5","url":"https://osv.dev/vulnerability/GHSA-w7rx-824v-rgx5"}],"summary":"WSO2 API Manager allows attackers to change the API rating"}