OpenAM Consortium Edition version 14.0.0 provided by...
Moderate severity
Unreviewed
Published
Sep 16, 2022
to the GitHub Advisory Database
•
Updated Jan 28, 2023
Description
Published by the National Vulnerability Database
Sep 15, 2022
Published to the GitHub Advisory Database
Sep 16, 2022
Last updated
Jan 28, 2023
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.
References