Skip to contentUninett Mod Auth Mellon vulnerabilities
- uninett mod auth mellonA flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue...CVE-2021-3639Fix available6.1 Medium
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +2 more +4 moreA vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL...CVE-2019-3877Fix available5.8 Medium
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +8 more +10 moreA vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse...CVE-2019-3878Fix available8.1 High
- uninett mod auth mellonmod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user...CVE-2017-6807Fix available6.1 Medium
- fedoraproject fedora, uninett mod auth mellon +1 moreThe am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data...CVE-2016-2146Fix available7.5 High
- fedoraproject fedora, uninett mod auth mellon +1 moreThe am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the...CVE-2016-2145Fix available7.5 High
- oracle linux, uninett mod auth mellon +1 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information...CVE-2014-8566Fix available6.4 Medium
- redhat enterprise linux desktop, enterprise linux server, enterprise linux server aus +4 more +6 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service ...CVE-2014-8567Fix available9.4 High