TI-2019-02888 CVE-2019-3878 · GHSA-6gx9-985p-w8c8
Authentication bypass in uninett mod_auth_mellon
Priority MEDIUM 41
A vulnerability was found in mod_auth_mellon before v0.14.2.
Mod Auth Mellon Project
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Mod Auth Mellon Project records in CISA KEVNo Mod Auth Mellon Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2019-02887 CVE-2019-3877 · GHSA-qr9h-f4fq-2h85
Open redirect in uninett mod_auth_mellon
Priority LOW 31
A vulnerability was found in mod_auth_mellon before v0.14.2.
TI-2019-09768 CVE-2019-13038 · GHSA-67h8-fxm4-vr72
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as…
Priority LOW 30
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.