Skip to content
OpenAdvisories
Medium ALAS2-2020-1436 1 CVE

Moderate: mod_auth_mellon security update (Amazon Linux 2)

Published Jun 16, 2020 · Updated Jun 17, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-13038: mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL. 99999: CVE-2019-13038 mod_auth_mellon: an Open Redirect via the login?ReturnTo= substring which could facilitate information theft 1725740: CVE-2019-13038 mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 mod_auth_mellon 0:0.14.0-8.amzn2
Amazon Linux · 2 mod_auth_mellon-debuginfo 0:0.14.0-8.amzn2
Amazon Linux · 2 mod_auth_mellon-diagnostics 0:0.14.0-8.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-13038.html