CVE-2024-41667

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input. Although the developer intended to implement a custom URL for handling login to override the default OpenAM login, they did not restrict the `CustomLoginUrlTemplate`, allowing it to be set freely. Commit fcb8432aa77d5b2e147624fe954cb150c568e0b8 introduces `TemplateClassResolver.SAFER_RESOLVER` to disable the resolution of commonly exploited classes in FreeMarker template injection. As of time of publication, this fix is expected to be part of version 15.0.4.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Jul 24, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-416688.3The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a p CVE-2024-41678.8A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub_422AA4. The manipula CVE-2024-416707.5In the module "PayPal Official" for PrestaShop 7+ releases prior to version 6.4.2 and for PrestaShop 1.6 releases prior to version 3.18.1, a CVE-2024-416718.3Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web c CVE-2024-416727.5DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in filesystem is accessible for reading using `sniff_csv`, CVE-2024-416737.1Decidim is a participatory democracy framework. The version control feature used in resources is subject to potential XSS attack through a m CVE-2024-416745.3CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server,CVE-2024-416756.1CKAN is an open-source data management system for powering data hubs and data portals. The Datatables view plugin did not properly escape re CVE-2024-416764.8Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the design/header/welcome, CVE-2024-416776.1Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions up to but not includi CVE-2024-416786.1GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order CVE-2024-416798.8GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability from the ticket for