{"action":"Upgrade org.openidentityplatform.openam:openam-oauth2 to 15.0.4 or later.","affected":[{"fixed":"15.0.4","introduced":"0"}],"component":"org.openidentityplatform.openam:openam-oauth2","cve_ids":["CVE-2024-41667"],"ecosystem":"Maven","epss":0.03536,"exploited":false,"fixed_versions":["15.0.4"],"ghsa_id":"GHSA-7726-43hg-m23v","id":"tcs_01M5N8HPNPC609B3JGKJV0P45Y","modified_at":"2026-09-10T03:50:16.382903145Z","published_at":"2024-07-25T14:15:32Z","references":["https://osv.dev/vulnerability/GHSA-7726-43hg-m23v","https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-7726-43hg-m23v","https://nvd.nist.gov/vuln/detail/CVE-2024-41667","https://github.com/OpenIdentityPlatform/OpenAM/commit/fcb8432aa77d5b2e147624fe954cb150c568e0b8","https://github.com/OpenIdentityPlatform/OpenAM"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7726-43hg-m23v","url":"https://osv.dev/vulnerability/GHSA-7726-43hg-m23v"}],"summary":"OpenAM FreeMarker template injection"}