THREAT OPS › Threat News › [NVD] CVE-2024-10302 (MEDIUM 4.0) — The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes.
Allowing unvalidated input into user claims can l
[NVD] CVE-2024-10302 (MEDIUM 4.0) — The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes. Allowing unvalidated input into user claims can l
CVE-2024-10302 CVSS: 4.0 MEDIUM Published: 2026-08-06T08:16:26.920
The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes.
Allowing unvalidated input into user claims can lead to various security risks. Malicious or malforme
Indicators of compromise
- CVE-2024-10302cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-10302