Threats tagged 'ghsa-xg4f-9v56-jq95'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-123546OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to Medium5.32026-11-08GCVE DatabaseCVE-2026-123546 OpenAM versions prior to 16.1.4 have an open redirect and cross-site scripting (XSS) vulnerability. This flaw allows remote attackers to manipulate post-login and logout redirect destinations via the 'goto' and 'gotoOnFail' parameters. Exploitation can lead to redirecting users to phishing sites or executing malicious scripts in the XUI interface to steal session cookies. Report on CVE-2026-123546 Vulnerability CWE-79 #ghsa-xg4f-9v56-jq95	GCVE Database	2026-11-08

Page 1 of 1