Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | libapache2-mod-auth-mellon | 0.14.2-1+deb10u1 |
Vulnerabilities 2
-
Unscored —
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the …
-
Unscored —
A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an att…