-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe GitHub commit diff explicitly shows the vulnerable rateTopic function was modified to add input validation for the rating parameter. Prior to this patch, there was no server-side validation of the rating value, enabling manipulation. The CVE description confirms this lack of validation in the Forum feature's API rating mechanism. No other functions show direct evidence of vulnerability in the provided materials.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.wso2.carbon.apimgt:forum | maven | <= 9.0.78 |
JavaJavaOngoing coverage of React2Shell