CVE-2021-36760
Last modified
CVE-2021-36760 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. EPSS estimates a 0.72% chance of exploitation in the next 30 days.
Description
In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wso2 | Api Manager | 3.0.0 |
| Wso2 | Api Manager | 3.1.0 |
| Wso2 | Api Manager | 3.2.0 |
| Wso2 | Api Manager | 4.0.0 |
| Wso2 | Identity Server | 5.7.0 |
| Wso2 | Identity Server | 5.8.0 |
| Wso2 | Identity Server | 5.9.0 |
| Wso2 | Identity Server | 5.10.0 |
| Wso2 | Identity Server | 5.11.0 |
| Wso2 | Identity Server As Key Manager | 5.3.0 |
| Wso2 | Identity Server As Key Manager | 5.5.0 |
| Wso2 | Identity Server As Key Manager | 5.6.0 |
| Wso2 | Identity Server As Key Manager | 5.7.0 |
| Wso2 | Identity Server As Key Manager | 5.9.0 |
| Wso2 | Identity Server As Key Manager | 5.10.0 |
| Wso2 | Iot Server | 3.3.1 |
References
- https://docs.wso2.com/display/Security/2021+AdvisoriesVendor Advisory
- https://docs.wso2.com/display/Security/2021+AdvisoriesVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-36760?
How severe is CVE-2021-36760?
How do I fix CVE-2021-36760?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-36754PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anyb…7.5
- CVE-2021-36755Nightscout Web Monitor (aka cgm-remote-monitor) 14.2.2 allow…6.1
- CVE-2021-36756CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Ce…6.5
- CVE-2021-367581Password Connect server before 1.2 is missing validation ch…5.4
- CVE-2021-36759Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-3676Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-36761The GeoAnalytics feature in Qlik Sense April 2020 patch 4 al…5.3
- CVE-2021-36762An issue was discovered in HCC Embedded InterNiche NicheStac…7.5
- CVE-2021-36763In CODESYS V3 web server before 3.5.17.10, files or director…7.5
- CVE-2021-36764In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Poin…7.5
- CVE-2021-36765In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP r…7.5
- CVE-2021-36766Concrete5 through 8.5.5 deserializes Untrusted Data. The vul…7.2
Are you affected by CVE-2021-36760?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST