Summary
It was discovered that mod-auth-mellon incorrectly filtered certain URLs.
A remote attacker could possibly use this issue to perform an open redirect
attack.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libapache2-mod-auth-mellon | 0.13.1-1ubuntu0.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | libapache2-mod-auth-mellon | 0.16.0-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an att…
References
-
report
https://ubuntu.com/security/CVE-2021-3639