Product
ForgeRock OpenAM versions prior to 16.1.4 are vulnerable to an attribute injection flaw during self-registration that allows unauthenticated attackers to elevate privileges by joining administrative groups.