Uninett mod_auth_mellon 0.13.0

CPE Details

Uninett mod_auth_mellon 0.13.0
uninett
mod_auth_mellon
0.13.0
2019-07-02
14h45 +00:00
2019-07-02
14h45 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:uninett:mod_auth_mellon:0.13.0:*:*:*:*:*:*:*

Informations

Vendor

uninett

Product

mod_auth_mellon

Version

0.13.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-3639 2022-08-22 12h49 +00:00 A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.
6.1
Moyen
CVE-2017-6807 2017-03-13 13h00 +00:00 mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
6.1
Moyen