Red Hat Security Advisory

RHSA-2020:1660

mod_auth_mellon security and bug fix update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) mod_auth_mellon-0.14.0-11.el8, mod_auth_mellon-diagnostics-0.14.0-11.el8

Fixes 1 record

TI-2019-09768 CVE-2019-13038 · GHSA-67h8-fxm4-vr72

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as…

LOW 30

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01423 Published 2019-06-29 Partial fix CWE-601