CVE-2024-41667

OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input. Although the developer intended to implement a custom URL for handling login to override the default OpenAM login, they did not restrict the `CustomLoginUrlTemplate`, allowing it to be set freely. Commit fcb8432aa77d5b2e147624fe954cb150c568e0b8 introduces `TemplateClassResolver.SAFER_RESOLVER` to disable the resolution of commonly exploited classes in FreeMarker template injection. As of time of publication, this fix is expected to be part of version 15.0.4.

• CWE-94

• https://github.com/OpenIdentityPlatform/OpenAM/commit/fcb8432aa77d5b2e147624fe954cb150c568e0b8
• https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-7726-43hg-m23v
• https://github.com/OpenIdentityPlatform/OpenAM/commit/fcb8432aa77d5b2e147624fe954cb150c568e0b8
• https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-7726-43hg-m23v

Published

Jul 24, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41661Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-41662VNote is a note-taking platform. A Cross-Site Scripting (XSS…9.6
• CVE-2024-41663Canarytokens help track activity and actions on a network. …3.5
• CVE-2024-41664Canarytokens help track activity and actions on a network. P…5.4
• CVE-2024-41665Ampache, a web based audio/video streaming application and f…5.4
• CVE-2024-41666Argo CD is a declarative, GitOps continuous delivery tool fo…6.5
• CVE-2024-41668The cBioPortal for Cancer Genomics provides visualization, a…8.3
• CVE-2024-4167A vulnerability was found in Tenda 4G300 1.01.42 and classif…8.8
• CVE-2024-41670In the module "PayPal Official" for PrestaShop 7+ releases p…7.5
• CVE-2024-41671Twisted is an event-based framework for internet application…8.3
• CVE-2024-41672DuckDB is a SQL database management system. In versions 1.0.…7.5
• CVE-2024-41673Decidim is a participatory democracy framework. The version …7.1