CVE-2024-4412Published
Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2024-4412 · Microsoft / collected KEV context
cve-program · CVE-2024-4412
- https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2023-3098/
- https://github.com/wso2-extensions/identity-governance/pull/848
- https://github.com/wso2/carbon-identity-framework/pull/5895
- https://github.com/wso2/identity-apps/pull/6829
- https://github.com/wso2/product-apim/pull/13524
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.