WSO2 Identity Server EL Injection via Unvalidated Input
CVE-2024-4412 Published on October 19, 2026
Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbitrary operations within the affected deployment.
Exploitation of this vulnerability requires administrator privileges. The impact is minimal as EL usage is restricted to certain read operations.
Vulnerability Analysis
CVE-2024-4412 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
What is a Code Injection Vulnerability?
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CVE-2024-4412 has been classified to as a Code Injection vulnerability or weakness.
Products Associated with CVE-2024-4412
Want to know whenever a new CVE is published for Wso2 products? stack.watch will email you.
Affected Versions
WSO2 Enterprise Integrator:- Before 6.6.0 is unknown.
- Version 6.6.0 and below 6.6.0.205 is affected.
- Before 3.1.0 is unknown.
- Version 3.1.0 and below 3.1.0.276 is affected.
- Version 3.2.0 and below 3.2.0.366 is affected.
- Version 3.2.1 and below 3.2.1.18 is affected.
- Version 4.0.0 and below 4.0.0.307 is affected.
- Version 4.1.0 and below 4.1.0.169 is affected.
- Version 4.2.0 and below 4.2.0.108 is affected.
- Version 4.3.0 and below 4.3.0.20 is affected.
- Before 2.0.0 is unknown.
- Version 2.0.0 and below 2.0.0.346 is affected.
- Before 5.10.0 is unknown.
- Version 5.10.0 and below 5.10.0.297 is affected.
- Version 5.11.0 and below 5.11.0.337 is affected.
- Version 6.0.0 and below 6.0.0.189 is affected.
- Version 6.1.0 and below 6.1.0.149 is affected.
- Version 7.0.0 and below 7.0.0.15 is affected.
- Before 5.10.0 is unknown.
- Version 5.10.0 and below 5.10.0.293 is affected.
- Before 2.0.0 is unknown.
- Version 2.0.0 and below 2.0.0.326 is affected.
- Version 5.14.127 and below 5.14.127.8 is affected.
- Version 5.17.5 and below 5.17.5.266 is affected.
- Version 5.17.118 and below 5.17.118.6 is affected.
- Version 5.18.187 and below 5.18.187.253 is affected.
- Version 5.18.248 and below 5.18.248.20 is affected.
- Version 5.23.8 and below 5.23.8.178 is affected.
- Version 5.24.8 and below 5.24.8.9 is affected.
- Version 5.25.92 and below 5.25.92.81 is affected.
- Version 5.25.705 and below 5.25.705.8 is affected.
- Version 7.0.78 and below 7.0.78.12 is affected.
- Version 5.14.127 and below 5.14.127.8 is affected.
- Version 5.17.5 and below 5.17.5.266 is affected.
- Version 5.17.118 and below 5.17.118.6 is affected.
- Version 5.18.187 and below 5.18.187.253 is affected.
- Version 5.18.248 and below 5.18.248.20 is affected.
- Version 5.23.8 and below 5.23.8.178 is affected.
- Version 5.24.8 and below 5.24.8.9 is affected.
- Version 5.25.92 and below 5.25.92.81 is affected.
- Version 5.25.705 and below 5.25.705.8 is affected.
- Version 7.0.78 and below 7.0.78.12 is affected.
- Version 1.4.72 and below 1.4.72.66 is affected.
- Version 1.4.100 and below 1.4.100.6 is affected.
- Version 1.7.2 and below 1.7.2.2 is affected.
- Version 1.8.107 and below 1.8.107.1 is affected.
- Version 5.18.248 and below 5.18.248.20 is affected.
- Version 5.24.8 and below 5.24.8.9 is affected.
- Version 5.25.705 and below 5.25.705.8 is affected.
- Version 1.0.190 and below 1.0.190.14 is affected.
- Version 1.2.3 and below 1.2.3.4 is affected.
- Version 1.2.23 and below 1.2.23.4 is affected.