9 results · Feed
-
Unscored —
A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an att…
-
Unscored —
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the …
-
Medium 5.8
A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with ba…
-
High 8.1
A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_me…
-
Unscored —
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one we…
-
Unscored —
The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows re…
-
Unscored —
The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function retu…
-
Unscored —
The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of se…
-
Unscored —
The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash)…