CVE-2022-31735

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published: Sep 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-317369.8A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunder CVE-2022-317379.8A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. Thi CVE-2022-317386.5When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user c CVE-2022-317398.8When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-CVE-2022-31747.5Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.CVE-2022-317408.8On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploit CVE-2022-317418.8A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. T CVE-2022-317426.5An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between i CVE-2022-317436.5Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been u CVE-2022-317446.5An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Conten CVE-2022-317454.3If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firef CVE-2022-317466.5Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability a