exploitDog

CVE-2022-31735

Опубликовано: 15 сент. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.

Ссылки

https://github.com/openam-jp/openam/issues/259
Issue Tracking
Patch
Third Party Advisory
https://jvn.jp/en/vu/JVNVU99326969/
Third Party Advisory
https://github.com/openam-jp/openam/issues/259
Issue Tracking
Patch
Third Party Advisory
https://jvn.jp/en/vu/JVNVU99326969/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:osstech:openam:*:*:*:*:consortium:*:*:*

Версия от 13.0.0 (включая) до 13.0.0-183 (включая)

cpe:2.3:a:osstech:openam:*:*:*:*:consortium:*:*:*

Версия от 14.0.0 (включая) до 14.2.0-2 (включая)

EPSS

Процентиль: 37%

0.00163

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

CWE-601

Связанные уязвимости

GHSA-f4f7-96rj-qrp5

CVSS3: 6.1

github

больше 3 лет назад

OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.

EPSS

Процентиль: 37%

0.00163

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

CWE-601