تجاوز المصادقة — CVE-2025-10470

تؤثر هذه الثغرة الموثقة في wso2 identity server. يوضح سجل NVD أن المشكلة تتمثل في: The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth. This vulnerability can result in a denial-of-service condition, causing service unavailability for deployments that utilize the Magic Link authenticator. The impact is limited to these specific deployments and requires repeated invalid authentication attempts to trigger.