Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
Summary
| CVE | CVE-2024-4412 |
|---|---|
| State | PUBLISHED |
| Assigner | WSO2 |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-19 17:16:57 UTC |
| Updated | 2026-10-19 21:06:28 UTC |
| Description | The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires administrator privileges. The impact is minimal as EL usage is restricted to certain read operations. |
Risk And Classification
Primary CVSS: v3.1 2.7 LOW from ed10eef1-636d-4fbe-9993-6890dfa878f8
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Problem Types: CWE-94 | CWE-94 CWE-94: Improper Control of Generation of Code ('Code Injection')
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ed10eef1-636d-4fbe-9993-6890dfa878f8 | Secondary | 2.7 | LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
| 3.1 | CNA | CVSS | 2.7 | LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
LowIntegrity
NoneAvailability
NoneCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | WSO2 | WSO2 Enterprise Integrator | unknown 6.6.0 custom | Not specified |
| CNA | WSO2 | WSO2 Enterprise Integrator | affected 6.6.0 6.6.0.205 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | unknown 3.1.0 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 3.1.0 3.1.0.276 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 3.2.0 3.2.0.366 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 3.2.1 3.2.1.18 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 4.0.0 4.0.0.307 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 4.1.0 4.1.0.169 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 4.2.0 4.2.0.108 custom | Not specified |
| CNA | WSO2 | WSO2 API Manager | affected 4.3.0 4.3.0.20 custom | Not specified |
| CNA | WSO2 | WSO2 Open Banking IAM | unknown 2.0.0 custom | Not specified |
| CNA | WSO2 | WSO2 Open Banking IAM | affected 2.0.0 2.0.0.346 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server | unknown 5.10.0 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server | affected 5.10.0 5.10.0.297 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server | affected 5.11.0 5.11.0.337 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server | affected 6.0.0 6.0.0.189 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server | affected 6.1.0 6.1.0.149 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server | affected 7.0.0 7.0.0.15 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server As Key Manager | unknown 5.10.0 custom | Not specified |
| CNA | WSO2 | WSO2 Identity Server As Key Manager | affected 5.10.0 5.10.0.293 custom | Not specified |
| CNA | WSO2 | WSO2 Open Banking AM | unknown 2.0.0 custom | Not specified |
| CNA | WSO2 | WSO2 Open Banking AM | affected 2.0.0 2.0.0.326 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.14.127 5.14.127.8 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.17.5 5.17.5.266 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.17.118 5.17.118.6 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.18.187 5.18.187.253 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.18.248 5.18.248.20 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.23.8 5.23.8.178 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.24.8 5.24.8.9 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.25.92 5.25.92.81 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 5.25.705 5.25.705.8 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration UI | affected 7.0.78 7.0.78.12 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.14.127 5.14.127.8 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.17.5 5.17.5.266 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.17.118 5.17.118.6 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.18.187 5.18.187.253 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.18.248 5.18.248.20 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.23.8 5.23.8.178 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.24.8 5.24.8.9 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.25.92 5.25.92.81 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 5.25.705 5.25.705.8 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store Configuration | affected 7.0.78 7.0.78.12 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Recovery Management | affected 1.4.72 1.4.72.66 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Recovery Management | affected 1.4.100 1.4.100.6 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Recovery Management | affected 1.7.2 1.7.2.2 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Recovery Management | affected 1.8.107 1.8.107.1 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Application Authentication Framework | affected 5.18.248 5.18.248.20 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Application Authentication Framework | affected 5.24.8 5.24.8.9 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity Application Authentication Framework | affected 5.25.705 5.25.705.8 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store | affected 1.0.190 1.0.190.14 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store | affected 1.2.3 1.2.3.4 custom | Not specified |
| CNA | WSO2 | WSO2 Carbon Identity User Store | affected 1.2.23 1.2.23.4 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/wso2/identity-apps/pull/6829 | ed10eef1-636d-4fbe-9993-6890dfa878f8 | github.com | |
| github.com/wso2/product-apim/pull/13524 | ed10eef1-636d-4fbe-9993-6890dfa878f8 | github.com | |
| security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO... | ed10eef1-636d-4fbe-9993-6890dfa878f8 | security.docs.wso2.com | |
| github.com/wso2-extensions/identity-governance/pull/848 | ed10eef1-636d-4fbe-9993-6890dfa878f8 | github.com | |
| github.com/wso2/carbon-identity-framework/pull/5895 | ed10eef1-636d-4fbe-9993-6890dfa878f8 | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
Solutions
CNA: Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2023-3098/#solution
There are currently no legacy QID mappings associated with this CVE.