Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhcv-7w89-jjj5

Опубликовано: 23 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.

EPSS

Процентиль: 29%
0.00103
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 3 года назад

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.

CVSS3: 6.1
redhat
около 4 лет назад

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.

CVSS3: 6.1
nvd
почти 3 года назад

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.

CVSS3: 6.1
debian
почти 3 года назад

A flaw was found in mod_auth_mellon where it does not sanitize logout ...

suse-cvrf
больше 3 лет назад

Security update for apache2-mod_auth_mellon

EPSS

Процентиль: 29%
0.00103
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601