Описание
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.13.1-1ubuntu0.2 |
| cosmic | ignored | end of life |
| devel | released | 0.14.2-1ubuntu2 |
| disco | ignored | end of life |
| eoan | released | 0.14.2-1ubuntu1.19.10.1 |
| esm-apps/xenial | needed | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | released | 0.13.1-1ubuntu0.2 |
| esm-infra/focal | released | 0.14.2-1ubuntu2 |
| focal | released | 0.14.2-1ubuntu2 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?Retu ...
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
ELSA-2020-1660: mod_auth_mellon security and bug fix update (MODERATE)
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3