CVE-2025-1397 | WSO2 JWT Grant Type for OAuth2 Identity Provider Validation state issue

A vulnerability, which was classified as critical, was found in WSO2 Universal Gateway, Traffic Manager, API Manager, API Control Plane, Identity Server, Open Banking AM, Open Banking IAM, Identity Server as Key Manager, Carbon OAuth and JWT Grant Type for OAuth2. This vulnerability affects unknown code of the component Identity Provider Validation. Executing a manipulation can lead to state issue.

This vulnerability is registered as CVE-2025-1397. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More