CVE-2023-22320 (published 2023-01-10T00:00:00)
OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.
Affected products: Vendor: OpenAM consortium
Product: OpenAM Web Policy Agent (OpenAM Consortium Edition)
Versions: 4.1.0