CVE-2016-4311

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-02-17 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request.

Affected products

WSO2 Identity Server: 5.1.0

References

http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt
http://packetstormsecurity.com/files/138329/WSO2-Identity-Server-5.1.0-XML-Injection.html
http://www.securityfocus.com/archive/1/539199/100/0/threaded
http://www.securityfocus.com/bid/92485
https://www.exploit-db.com/exploits/40239/
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2016-0096
http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt
http://packetstormsecurity.com/files/138329/WSO2-Identity-Server-5.1.0-XML-Injection.html
http://www.securityfocus.com/archive/1/539199/100/0/threaded
http://www.securityfocus.com/bid/92485
https://www.exploit-db.com/exploits/40239/

Get alerted when CVE-2016-4311 or the next vulnerability affects your stack