PT-2026-51438

Name of the Vulnerable Software and Affected Versions Open Access Management OpenAM versions prior to 16.1.1 Description The OAuth 2.0 and OpenID Connect authorization endpoint fails to sufficiently encode user-supplied parameters, including the state variable, before they are rendered into HTML ...