Mod Auth Mellon Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mod Auth Mellon Project records in CISA KEV

No Mod Auth Mellon Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mod Auth Mellon 3 records MEDIUM

Records

3 records in Mod Auth Mellon · all components

TI-2019-02888 CVE-2019-3878 · GHSA-6gx9-985p-w8c8

Authentication bypass in uninett mod_auth_mellon

MEDIUM 41

A vulnerability was found in mod_auth_mellon before v0.14.2.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.02969 Published 2019-03-26 Fixed in v0.14.2 CWE-305

TI-2019-02887 CVE-2019-3877 · GHSA-qr9h-f4fq-2h85

Open redirect in uninett mod_auth_mellon

LOW 31

A vulnerability was found in mod_auth_mellon before v0.14.2.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02121 Published 2019-03-27 Partial fix CWE-601

TI-2019-09768 CVE-2019-13038 · GHSA-67h8-fxm4-vr72

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as…

LOW 30

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01423 Published 2019-06-29 Partial fix CWE-601

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0