Threats Tagged 'ghsa-mxvw-rw3m-5c33'

1 threat

Threats Tagged 'ghsa-mxvw-rw3m-5c33'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.3	EPSS 0.1%	CVE-2026-105118OpenAM · Improper Verification of Cryptographic Signature Low2.3EPSS 0.1%2026-10-03CVE Database V5CVE-2026-105118 OpenAM versions before 16.1.3 contain an open redirect vulnerability in the /oauth2/connect/endSession endpoint. This flaw allows unauthenticated attackers to supply an unverified id_token_hint, enabling redirection to any registered post-logout URI. The vulnerability can be exploited for phishing attacks that leverage the trust of the OpenAM host. The issue is classified as low severity with a CVSS 4.0 score of 2.3. EPSS 0.1%Vulnerability OpenIdentityPlatform #ghsa-mxvw-rw3m-5c33	CVE Database V5	2026-10-03

Showing 1–1 of 1 result