Логотип exploitDog
bind:"CVE-2021-32786" OR bind:"CVE-2021-32791" OR bind:"CVE-2021-32792" OR bind:"CVE-2021-39191"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2021-32786" OR bind:"CVE-2021-32791" OR bind:"CVE-2021-32792" OR bind:"CVE-2021-39191"
Поиск уязвимостей по источнику БДУ ФСТЭК

БДУ ФСТЭК

Поиск уязвимостей по источнику Microsoft MSRC

Microsoft MSRC

Поиск уязвимостей по источнику NVD

NVD

Поиск уязвимостей по источнику Oracle ELSA

Oracle ELSA

Поиск уязвимостей по источнику Red Hat CVE

Red Hat CVE

Поиск уязвимостей по источнику РЕД ОС

РЕД ОС

Поиск уязвимостей по источнику Rocky RLSA

Rocky RLSA

Поиск уязвимостей по источнику SUSE CVRF

SUSE CVRF

Поиск уязвимостей по источнику Ubuntu

Ubuntu

Поиск уязвимостей по источнику Debian

Debian

Поиск уязвимостей по источнику Github

Github

Количество 31

Количество 31

redhat логотип

CVE-2021-39191

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of mod_auth_openidc was reported to be vulnerable to an open redirect attack by supplying a crafted URL in the `target_link_uri` parameter. A patch in version 2.4.9.4 made it so that the `OIDCRedirectURLsAllowed` setting must be applied to the `target_link_uri` parameter. There are no known workarounds aside from upgrading to a patched version.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2021-39191

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of mod_auth_openidc was reported to be vulnerable to an open redirect attack by supplying a crafted URL in the `target_link_uri` parameter. A patch in version 2.4.9.4 made it so that the `OIDCRedirectURLsAllowed` setting must be applied to the `target_link_uri` parameter. There are no known workarounds aside from upgrading to a patched version.

CVSS3: 4.7
EPSS: Низкий
msrc логотип

CVE-2021-39191

около 4 лет назад

URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2021-39191

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apa ...

CVSS3: 4.7
EPSS: Низкий
ubuntu логотип

CVE-2021-32792

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

CVSS3: 3.1
EPSS: Низкий
redhat логотип

CVE-2021-32792

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2021-32792

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

CVSS3: 3.1
EPSS: Низкий
msrc логотип

CVE-2021-32792

около 4 лет назад

XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2021-32792

больше 4 лет назад

mod_auth_openidc is an authentication/authorization module for the Apa ...

CVSS3: 3.1
EPSS: Низкий
fstec логотип

BDU:2022-01785

больше 4 лет назад

Уязвимость модуля аутентификации и авторизации для Apache 2.x HTTP server Mod_auth_openidc, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 6.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:0215-1

около 3 лет назад

Security update for apache2-mod_auth_openidc

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2021-39191

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of mod_auth_openidc was reported to be vulnerable to an open redirect attack by supplying a crafted URL in the `target_link_uri` parameter. A patch in version 2.4.9.4 made it so that the `OIDCRedirectURLsAllowed` setting must be applied to the `target_link_uri` parameter. There are no known workarounds aside from upgrading to a patched version.

CVSS3: 6.1
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-39191

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of mod_auth_openidc was reported to be vulnerable to an open redirect attack by supplying a crafted URL in the `target_link_uri` parameter. A patch in version 2.4.9.4 made it so that the `OIDCRedirectURLsAllowed` setting must be applied to the `target_link_uri` parameter. There are no known workarounds aside from upgrading to a patched version.

CVSS3: 4.7
0%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-39191

URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc

CVSS3: 6.1
0%
Низкий
около 4 лет назад
debian логотип
CVE-2021-39191

mod_auth_openidc is an authentication/authorization module for the Apa ...

CVSS3: 4.7
0%
Низкий
больше 4 лет назад
ubuntu логотип
CVE-2021-32792

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

CVSS3: 3.1
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-32792

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

CVSS3: 6.1
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-32792

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

CVSS3: 3.1
0%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-32792

XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc

CVSS3: 6.1
0%
Низкий
около 4 лет назад
debian логотип
CVE-2021-32792

mod_auth_openidc is an authentication/authorization module for the Apa ...

CVSS3: 3.1
0%
Низкий
больше 4 лет назад
fstec логотип
BDU:2022-01785

Уязвимость модуля аутентификации и авторизации для Apache 2.x HTTP server Mod_auth_openidc, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 6.1
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2023:0215-1

Security update for apache2-mod_auth_openidc

около 3 лет назад

Уязвимостей на страницу