Threats tagged 'ghsa-49pf-qwcj-84qg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-123536OpenAM before 16.1.4 contains a server-side request forgery vulnerability that allows administrators, including Medium5.12026-11-08GCVE DatabaseCVE-2026-123536 OpenAM versions prior to 16.1.4 contain a server-side request forgery (SSRF) vulnerability. This flaw allows administrators, including delegated realm administrators, to cause the server to fetch arbitrary URLs via the federation configuration wizard metadata URLs. Malicious metadata or OpenID Connect discovery URLs can be used to probe internal network hosts or cloud metadata endpoints, potentially exposing partial response data. Report on CVE-2026-123536 Vulnerability CWE-918 #ghsa-49pf-qwcj-84qg	GCVE Database	2026-11-08

Page 1 of 1