Exploit for Injection in Forgerock Openam CVE-2021-29156

Name: Exploit for Injection in Forgerock Openam CVE-2021-29156
Rating: 5 (203 reviews)

2022-10-07 | CVSS 5.0

## https://sploitus.com/exploit?id=247D8848-0864-5E40-BB19-1B04B408E896
# CVE-2021-29156 done right

This Proof of Concept is realized because the other PoC publicly available is broken ✨

## Install

```
go install github.com/5amu/CVE-2021-29156@latest
```

## References

* [https://nvd.nist.gov/vuln/detail/CVE-2021-29156](https://nvd.nist.gov/vuln/detail/CVE-2021-29156)
* [https://portswigger.net/research/hidden-oauth-attack-vectors](https://portswigger.net/research/hidden-oauth-attack-vectors)
* [https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0](https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0)