Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: zmartzone mod_auth_openidc — FEDORA-2021-e3017c538a Clear all filters
TI-2021-12458 CVE-2021-32792

XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc

Priority LOW 30

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0151 Published 2021-07-26 Fixed in 2.4.9 CWE-79
TI-2021-12452 CVE-2021-32786

Open Redirect in oidc_validate_redirect_url()

Priority LOW 32

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02364 Published 2021-07-22 Partial fix · 2.4.9 CWE-601