apache-mod_auth_openidc vulnerabilities (Mageia)
10 vulnerabilities.
-
apache-mod_auth_openidcMageia mod_auth_openidc has out-of-bounds read and write in state cookie parsing 7.5 High -
apache-mod_auth_openidcMageia mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data 8.2 High -
apache-mod_auth_openidcMageia Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc 7.5 High -
apache-mod_auth_openidcMageia XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc 3.1 Low -
apache-mod_auth_openidcMageia Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc 5.9 Medium -
apache-mod_auth_openidcMageia Open Redirect in oidc_validate_redirect_url() 4.7 Medium -
apache-mod_auth_openidcMageia Format string bug in the Redis cache implementation 5.3 Medium -
apache-mod_auth_openidcMageia CVE-2021-20718 affecting package mod_auth_openidc for versions less than 2.4.14.2-1 7.5 High -
apache-mod_auth_openidcMageia A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs... 6.1 Medium -
apache-mod_auth_openidcMageia mod_auth_openidc before version 2.4.0.1 is vulnerable to a None 5.8 Medium