Package · Ubuntu

libapache2-mod-auth-mellon

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

Unscored —

CVE-2021-3639

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an att…

libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Aug 22, 2022
Unscored —

CVE-2019-13038

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the …

libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Jun 29, 2019
Medium 5.8

CVE-2019-3877

A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with ba…

uninett mod_auth_mellon libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Mar 27, 2019
High 8.1

CVE-2019-3878

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_me…

uninett mod_auth_mellon libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Mar 26, 2019
Unscored —

CVE-2017-6807

mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one we…

libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu

Mar 13, 2017