1. Home
  2. CVE Database
  3. CVE-2025-5350
MEDIUM · 5.9

CVE-2025-5350

SSRF and Reflected XSS Vulnerabilities exist in multiple WSO2 products within the deprecated Try-It feature, which was accessible only to administrative users. This feature accepted user-supplied URLs...

Vulnerability Description

SSRF and Reflected XSS Vulnerabilities exist in multiple WSO2 products within the deprecated Try-It feature, which was accessible only to administrative users. This feature accepted user-supplied URLs without proper validation, leading to server-side request forgery (SSRF). Additionally, the retrieved content was directly reflected in the HTTP response, enabling reflected cross-site scripting (XSS) in the admin user's browser context. By tricking an administrator into accessing a crafted link, an attacker could force the server to fetch malicious content and reflect it into the admin’s browser, leading to arbitrary JavaScript execution for UI manipulation or data exfiltration. While session cookies are protected with the HttpOnly flag, the XSS still poses a significant security risk. Furthermore, SSRF can be used by a privileged user to query internal services, potentially aiding in internal network enumeration if the target endpoints are reachable from the affected product.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Wso2Api Control Plane4.5.0
Wso2Api Manager3.1.0
Wso2Enterprise Integrator6.6.0
Wso2Identity Server5.10.0
Wso2Identity Server As Key Manager5.10.0
Wso2Open Banking Am2.0.0
Wso2Open Banking Iam2.0.0
Wso2Traffic Manager4.5.0
Wso2Universal Gateway4.5.0

Related Weaknesses (CWE)

CWE-918CWE-79

References

FAQ

What is CVE-2025-5350?

CVE-2025-5350 is a vulnerability with a CVSS score of 5.9 (MEDIUM). SSRF and Reflected XSS Vulnerabilities exist in multiple WSO2 products within the deprecated Try-It feature, which was accessible only to administrative users. This feature accepted user-supplied URLs...

How severe is CVE-2025-5350?

CVE-2025-5350 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-5350?

Check the references section above for vendor advisories and patch information. Affected products include: Wso2 Api Control Plane, Wso2 Api Manager, Wso2 Enterprise Integrator, Wso2 Identity Server, Wso2 Identity Server As Key Manager.