CVE-2025-13591
Updated Oct 20, 2026 · PUBLISHED
Description
No description imported yet.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| org.wso2.carbon.identity.auth.otp.commons:org.wso2.carbon.identity.auth.otp.core | WSO2 / WSO2 Carbon Abstract OTP Authenticator | >= 1.0.10, < 1.0.10.2 | affected |
| org.wso2.carbon.identity.auth.otp.commons:org.wso2.carbon.identity.auth.otp.core | WSO2 / WSO2 Carbon Abstract OTP Authenticator | >= 1.0.5, < 1.0.5.3 | affected |
| org.wso2.carbon.identity.local.auth.emailotp:org.wso2.carbon.identity.local.auth.emailotp | WSO2 / Email OTP Authenticator | >= 1.0.18, < 1.0.18.8 | affected |
| org.wso2.carbon.identity.local.auth.emailotp:org.wso2.carbon.identity.local.auth.emailotp | WSO2 / Email OTP Authenticator | >= 1.0.30, < 1.0.30.5 | affected |
| WSO2 Identity Server | WSO2 / WSO2 Identity Server | >= 0, < 7.0.0 | unknown |
| WSO2 Identity Server | WSO2 / WSO2 Identity Server | >= 7.0.0, < 7.0.0.134 | affected |
| WSO2 Identity Server | WSO2 / WSO2 Identity Server | >= 7.1.0, < 7.1.0.42 | affected |