Securin Zero-Days

The following vulnerability was tested on the WSO2 API Manager version 2.6.0 Product.

Issue 01: Multiple Reflected Cross-Site Scripting.

Figure 01: Update the existing document information created. (here API Name is ‘reflected XSS’).

Figure 02: Add XSS payload to the variable “docName.”

 Figure 03: “HTTP Response for the modified “docName” variable with XSS payload.”

Figure 04: Injected XSS payload, “><script>alert(document.cookie)</script> gets reflected in the browser response.

Issue 02 & 03:

Figure 05: Injected XSS payload in variable docName, version, and apiName gets reflected in the response.

Figure 06: Injected payload gets reflected in the browser THREE times (THREE places).

Figure 07: Page Looks after executing the injected XSS payload.