org.openidentityplatform.openam:openam-oauth2 vulnerabilities (Maven)
7 vulnerabilities.
org.openidentityplatform.openam:openam-oauth2MavenOpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page6.1 Mediumorg.openidentityplatform.openam:openam-oauth2MavenOpenAM OAuth Authorization Bypass via PKCE Challenge9.1 Criticalorg.openidentityplatform.openam:openam-oauth2MavenOpenAM OAuth Client Impersonation via JWKS Resolver Cache7.6 Highorg.openidentityplatform.openam:openam-oauth2MavenOpenAM Arbitrary OAuth Token Minting via Push Registration7.6 Highorg.openidentityplatform.openam:openam-oauth2MavenOpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)8.3 Highorg.openidentityplatform.openam:openam-oauth2MavenOpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info8.1 Highorg.openidentityplatform.openam:openam-oauth2MavenOpenAM FreeMarker template injection8.8 High