CVE-2023-22320

2023-01-1004:15:10

Google

osv.dev

openam consortium edition

path traversal vulnerability

cwe-22

url parsing

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

60.2%

JSON

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.

References

github.com/openam-jp/web-agents/issues/3

jvn.jp/en/vu/JVN91740661/