TI-2025-03438 CVE-2025-3891 · GHSA-v96g-5j57-774c
Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled
Priority MEDIUM 42
A flaw was found in the mod_auth_openidc module for Apache httpd.
RHSA-2025:4597
mod_auth_openidc:2.3 security update
Released 2025-05-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cjose-0.6.1-4.module+el8.10.0+21813+b5444eb8.aarch64::mod_auth_openidc:2.3, cjose-0.6.1-4.module+el8.10.0+21813+b5444eb8.ppc64le::mod_auth_openidc:2.3, cjose-0.6.1-4.module+el8.10.0+21813+b5444eb8.s390x::mod_auth_openidc:2.3 +11