Summary
[0.14.0-11]
- Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
via the login?ReturnTo= substring which could
facilitate information theft [rhel-8]
[0.14.0-10]
- Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
X-Requested-With
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | mod_auth_mellon | 0:0.14.0-11.el8 |
| Oracle Linux · 8 | mod_auth_mellon-diagnostics | 0:0.14.0-11.el8 |
Vulnerabilities 1
-
Unscored —
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the …