WSO2 WSO2 Carbon Identity Recovery Management

• CVE-2024-4412 Low 2.7 Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations 0.4%
• CVE-2024-10302 Medium 4.0 Improper Input Validation via Signup Process in Multiple WSO2 Products Enables Content Manipulation and Data Exposure 0.3%