corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08764-ec06-7312-b155-2b7fa5e5606b

WSO2 #2: The many ways to bypass authentication in WSO2 products

crnkovic.dev · published 28 October 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at crnkovic.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
17
Words captured
3,246

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
WSO2 #1: 404 to arbitrary file read Read at the source ↗
crnkovic.dev
WSO2 #3: Server-side request forgery Read at the source ↗
crnkovic.dev
https://lokvica.com/discoveries/CVE-2025-9152/
lokvica.com
https://lokvica.com/discoveries/CVE-2025-10611/
lokvica.com
https://lokvica.com/discoveries/CVE-2025-9804/
lokvica.com
https://cwe.mitre.org/data/definitions/185.html
cwe.mitre.org
https://datatracker.ietf.org/doc/html/rfc6749
datatracker.ietf.org
https://apim.docs.wso2.com/en/latest/reference/product-apis/overview/
apim.docs.wso2.com
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2023/WSO2-2022-2177/
security.docs.wso2.com
https://github.com/wso2-extensions/identity-carbon-auth-rest/pull/216/files
github.com
https://github.com/wso2-extensions/identity-carbon-auth-rest/blob/23317928b1481c973369722be9a087b9b9dc8f22/components/org.wso2.carbon.identity.auth.service/src/main/java/org/wso2/carbon/identity/auth/service/module/ResourceConfigKey.java
github.com
https://docs.oracle.com/javase/8/docs/api/java/lang/String.html
docs.oracle.com
https://github.com/wso2-extensions/identity-carbon-auth-rest/blob/v1.9.14/components/org.wso2.carbon.identity.auth.valve/src/main/java/org/wso2/carbon/identity/auth/valve/AuthenticationValve.java
github.com
https://github.com/wso2-extensions/identity-carbon-auth-rest/blob/v1.9.14/components/org.wso2.carbon.identity.auth.service/src/main/java/org/wso2/carbon/identity/auth/service/util/AuthConfigurationUtil.java
github.com
https://docs.oracle.com/javase/8/docs/api/java/net/URI.html
docs.oracle.com
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3574/
security.docs.wso2.com
https://www.linkedin.com/in/rick-r/
linkedin.com