CVE-2024-10302

The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes. Allowing unvalidated input into user claims can lead to various security risks. Malicious or malformed data injected during signup could be processed by other parts of the application, potentially enabling attacks such as content manipulation, redirection, user interface inconsistencies, unauthorized actions, and data exposure. The actual impact depends on how the compromised data is consumed and the privileges associated with the affected users.

• CWE-20

• https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2024-3740/Vendor Advisory

Published

Aug 6, 2026

Last Modified

Aug 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10297A vulnerability was found in PHPGurukul Medical Card Generat…7.2
• CVE-2024-10298A vulnerability classified as critical has been found in PHP…7.2
• CVE-2024-10299A vulnerability classified as critical was found in PHPGuruk…7.2
• CVE-2024-1030A vulnerability was found in Cogites eReserv 7.7.58. It has …5.4
• CVE-2024-10300A vulnerability, which was classified as critical, has been …7.2
• CVE-2024-10301A vulnerability, which was classified as critical, was found…7.2
• CVE-2024-10305Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-10306A vulnerability was found in mod_proxy_cluster. The issue is…5.4
• CVE-2024-10307An issue has been discovered in GitLab EE/CE affecting all v…5.5
• CVE-2024-10308The Jeg Elementor Kit plugin for WordPress is vulnerable to …5.4
• CVE-2024-10309The Tracking Code Manager WordPress plugin before 2.4.0 does…5.9
• CVE-2024-1031A vulnerability was found in CodeAstro Expense Management Sy…6.1