WSO2 WSO2 Carbon MagicLink Authenticator Module

• CVE-2025-13909 Medium 4.3 Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure 0.3%
• CVE-2025-10470 High 8.6 Denial-of-Service via Magic Link Authentication in WSO2 Identity Server Allows Service Unavailability 0.3%
• CVE-2025-10908 High 7.3 Account Lock Bypass via Magic Link or Pass Key Authentication in WSO2 Identity Server Allows Unauthorized Access 0.2%