697950 matches found
cve-2026-47777
CVE-2026-47777 — Mastodon Featured Collections 授权绕过 概述 我负责任地披露了一个影响 Mastodon 实验性 Featured Collections 联邦管道的高危授权绕过 漏洞。 CVE ID： CVE-2026-47777 受影响组件 ActivityPub::VerifyFeaturedItemService 弱点 CWE-345 — 数据真实性验证不足 CWE-863 — 授权不正确 CVSS v3.1 分数| 向量 ---|--- 7.5（高危）|...
CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...
CVE-2026-48717
OpenAM Community Edition (through 16.0.6) contains an Improper Authorization flaw (CWE-285) in its OAuth2 authorization-code grant flow. The token endpoint only validates code_verifier when the realm-wide codeVerifierEnforced setting is enabled—a setting that ships disabled by default . When an a...
CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...
CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...
EUVD-2026-78369
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...
CVE-2026-47426 OpenAM OAuth Client Impersonation via JWKS Resolver Cache
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the privatekeyjwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwksuri resolver and verified assertion to the expected clientID in ClientCredentialsReader. An attacker...
EUVD-2026-78368
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the privatekeyjwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwksuri resolver and verified assertion to the expected clientID in ClientCredentialsReader. An attacker...
CVE-2026-47426 OpenAM OAuth Client Impersonation via JWKS Resolver Cache
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the privatekeyjwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwksuri resolver and verified assertion to the expected clientID in ClientCredentialsReader. An attacker...
CVE-2026-47426 OpenAM OAuth Client Impersonation via JWKS Resolver Cache
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the privatekeyjwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwksuri resolver and verified assertion to the expected clientID in ClientCredentialsReader. An attacker...
CVE-2026-47426
OpenAM (Open Access Management) Community Edition through 16.0.6 is affected by an Improper Authentication flaw (CWE-287) in the OAuth2 private_key_jwt client authentication path. The ClientJwksResolverCache does not reliably bind a cached jwks_uri resolver and verified assertion to the expected ...
EUVD-2026-78367
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...
CVE-2026-47424
OpenAM (Open Access Management) Community Edition through 16.0.6 contains a Protection Mechanism Failure (CWE-693) in the GroovySandboxValueFilter component of its server-side scripting sandbox. An authenticated user with the ability to create or edit scripts in an executed context — such as a su...
CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...
CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...
CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...
CVE-2026-41573 OpenAM LDAP Injection via `_queryId` Parameter
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection passes the queryId parameter from /json/realm/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-29156. The unescaped value reaches...
EUVD-2026-78366
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection passes the queryId parameter from /json/realm/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-29156. The unescaped value reaches...
CVE-2026-41573
OpenAM prior to 16.1.1 is vulnerable to LDAP injection via the _queryId parameter in CREST REST API user query endpoints (/json/{realm}/users). The root cause is that IdentityResourceV1.queryCollection() passes _queryId to CrestQuery with escapeQueryId explicitly set to false , bypassing the esca...
CVE-2026-41573 OpenAM LDAP Injection via `_queryId` Parameter
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection passes the queryId parameter from /json/realm/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-29156. The unescaped value reaches...