rpm package
opensuse/apache2-mod_auth_mellon&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/apache2-mod_auth_mellon&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-3639 | Med | 6.1 | < 0.19.0-1.1 | 0.19.0-1.1 | Aug 22, 2022 | A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server |
- affected < 0.19.0-1.1fixed 0.19.0-1.1
A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server