Description
Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenAM Consortium | OpenAM (Open Source Edition) | 13 | — |
References
- https://www.cs.themistruct.com/
- JVN#43193964 third-party-advisory
- https://www.osstech.co.jp/support/am2019-1-1