Red Hat Security Advisory

RHSA-2022:1934

mod_auth_mellon security update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) mod_auth_mellon-0.14.0-12.el8.1, mod_auth_mellon-diagnostics-0.14.0-12.el8.1

TI-2021-02584 CVE-2021-3639 · GHSA-mhcv-7w89-jjj5

LOW 29

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01031 Published 2022-08-22 Partial fix CWE-601