Threats tagged 'ghsa-26f2-35v8-467g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-123547OpenAM before 16.1.4 contains an open redirect vulnerability that allows attackers to redirect users to external sites Low2.32026-11-08GCVE DatabaseCVE-2026-123547 OpenAM versions prior to 16.1.4 have an open redirect vulnerability due to improper validation of the RelayState parameter when no relayStateUrlList is configured. This flaw allows attackers to craft single sign-on links that redirect users from the trusted OpenAM domain to external malicious sites, potentially enabling phishing attacks and bypassing URL filters. Report on CVE-2026-123547 Vulnerability CWE-601 #ghsa-26f2-35v8-467g	GCVE Database	2026-11-08

Page 1 of 1