Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v96g-5j57-774c

Опубликовано: 29 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

EPSS

Процентиль: 74%
0.00855
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-248

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

CVSS3: 7.5
redhat
около 2 месяцев назад

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

CVSS3: 7.5
nvd
около 2 месяцев назад

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

CVSS3: 7.5
debian
около 2 месяцев назад

A flaw was found in the mod_auth_openidc module for Apache httpd. This ...

suse-cvrf
6 дней назад

Security update for apache2-mod_auth_openidc

EPSS

Процентиль: 74%
0.00855
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-248