Summary
It was discovered that mod_auth_mellon incorrectly handled certain
requests. An attacker could possibly use this issue to redirect a user to a
malicious URL.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libapache2-mod-auth-mellon | 0.13.1-1ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the …
References
-
report
https://ubuntu.com/security/CVE-2019-13038