Home

CVE-2019-20479

Description

A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.474

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2020:3032) mod_auth_openidc:2.3 security and bug fix update cjose-0.6.1-2.module+el8+2454+f890a43a.x86_64.rpmLinux
(RHSA-2020:3032) mod_auth_openidc:2.3 security and bug fix update cjose-debugsource-0.6.1-2.module+el8+2454+f890a43a.x86_64.rpmLinux
(RHSA-2020:3032) mod_auth_openidc:2.3 security and bug fix update cjose-devel-0.6.1-2.module+el8+2454+f890a43a.x86_64.rpmLinux
(RHSA-2020:3032) mod_auth_openidc:2.3 security and bug fix update mod_auth_openidc-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.x86_64.rpmLinux
(RHSA-2020:3032) mod_auth_openidc:2.3 security and bug fix update mod_auth_openidc-debugsource-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.x86_64.rpmLinux
(RHSA-2020:3970) mod_auth_openidc security update mod_auth_openidc-1.8.8-7.el7.x86_64.rpmLinux
(RHSA-2020:3970)Low: security update mod_auth_openidc-debuginfo-1.8.8-7.el7.x86_64.rpmLinux
Mod_auth_openidc update (ELSA-2020-3970) mod_auth_openidc-1.8.8-7.el7.x86_64.rpmLinux
mod_auth_openidc Security Update (ALAS-2020-1538) mod_auth_openidc-1.8.8-7.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234