CVE-2024-4989 | WSO2 API Manager up to 4.0.x URL Validation callback redirect

October 21, 2026 Yanac

A vulnerability was found in WSO2 API Manager up to 4.0.x. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component URL Validation. Performing a manipulation of the argument callback results in open redirect.

This vulnerability is cataloged as CVE-2024-4989. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More