Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | libapache2-mod-auth-openidc | 2.3.10.2-1+deb10u4 |
Vulnerabilities 1
-
High 7.5
Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc
mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks co…