Deserialization Of Untrusted Data

org.openidentityplatform.openam, openam-auth-webauthn is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the WebAuthn authentication module deserializing attacker-controlled data from a storage attribute under certain conditions, which allows an attacker to achieve...