CVE-2023-6839
At a glance Severity MEDIUM 5.3 EPSS EPSS 0.53 % · percentile 44 (2026-10-27) State PUBLISHED Published 2023-12-15 Updated 2024-10-08 Assigner WSO2 NVD status Modified Description Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N WSO2 CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · ed10eef1-636d-4fbe-9993-6890dfa878f8 (Secondary) CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
Affected configurations (NVD CPE) cpe:2.3:a:wso2:api_manager:3.0.0:*:*:*:*:*:*:*cpe:2.3:a:wso2:api_manager:3.1.0:*:*:*:*:*:*:*cpe:2.3:a:wso2:api_manager:3.2.0:*:*:*:*:*:*:*cpe:2.3:a:wso2:api_manager:4.0.0:*:*:*:*:*:*:*Affected products Product Versions WSO2 · WSO2 API Manager unknown 0 < 3.0.0.0 ; affected 3.0.0.0 < 3.0.0.15 ; affected 3.2.0.0 < 3.2.0.32
References
Sources
