WC
Product
WSO2 Carbon MagicLink Authenticator Module
3
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add WSO2 Carbon MagicLink Authenticator Module to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-10470 | 8.6 | May 11 | Denial-of-Service via Magic Link Authentication in WSO2 Identity Server Allows Service Unavailability Affected: 1.1.22 before 1.1.22.3 |
| CVE-2025-10908 | 7.3 | May 11 | Account Lock Bypass via Magic Link or Pass Key Authentication in WSO2 Identity Server Allows Unauthorized Access Affected: 1.1.0 before 1.1.0.1; 1.1.5 before 1.1.5.2; 1.1.22 before 1.1.22.5; 1.1.31 before 1.1.31.2 |
| CVE-2025-13909 | 4.3 | Aug 6 | Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure Affected: 1.1.22 before 1.1.22.6; 1.1.31 before 1.1.31.3 |
Showing 3