Vulnerabilities

TI-2019-09768 CVE-2019-13038 · GHSA-67h8-fxm4-vr72

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as…

LOW 30

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01423 Published 2019-06-29 Partial fix CWE-601

TI-2019-02887 CVE-2019-3877 · GHSA-qr9h-f4fq-2h85

Open redirect in uninett mod_auth_mellon

LOW 31

A vulnerability was found in mod_auth_mellon before v0.14.2.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02121 Published 2019-03-27 Partial fix CWE-601

TI-2019-02888 CVE-2019-3878 · GHSA-6gx9-985p-w8c8

Authentication bypass in uninett mod_auth_mellon

MEDIUM 41

A vulnerability was found in mod_auth_mellon before v0.14.2.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.02969 Published 2019-03-26 Fixed in v0.14.2 CWE-305

Vulnerabilities

Filters

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as…

Open redirect in uninett mod_auth_mellon

Authentication bypass in uninett mod_auth_mellon