CVE-2025-64099

描述

### Summary If the "claims_parameter_supported" parameter is activated, it is possible through the "oidc-claims-extension.groovy" script, to inject the value of choice into a claim contained in the id_token or in the user_info. Authorization function requests do not prevent a claims parameter containing a JSON file to be injected. This JSON file allows users to customize claims returned by the "id_token" and "user_info" files. This allows for a very wide range of vulnerabilities depending on how clients use claims. For example, if some clients rely on an email field to identify a user, users can choose to entera any email address, and therefore assume any chosen identity.

如何修補 CVE-2025-64099

要修補 CVE-2025-64099,請將受影響套件升級到下列已修補版本。

• —升級至 16.0.3 或更新版本

CVE-2025-64099 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 16.0.3

CVSS 分數

參考連結(5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2025-64099
• PATCHgithub.com/OpenIdentityPlatform/OpenAM
• WEBgithub.com/OpenIdentityPlatform/OpenAM/commit/4254b34b2b8b4867f2e7fccfac73904213d48510
• WEBgithub.com/OpenIdentityPlatform/OpenAM/releases/tag/16.0.3