CVE-2021-3639: Medium severity Uninett Mod Auth Mellon vulnerability
A flaw was found in modauthmellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.
Other sources
A vulnerability was found in modauthmellon where it does not sanatize logout URLs properly results in phishing attacks by tricking users.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3639?
CVE-2021-3639 has a high severity rating due to its potential to facilitate phishing attacks.
How do I fix CVE-2021-3639?
To fix CVE-2021-3639, upgrade mod_auth_mellon to version 0.18.0 or later, which includes the necessary patches.
What software is affected by CVE-2021-3639?
CVE-2021-3639 affects mod_auth_mellon versions prior to 0.18.0.
What kind of attacks can be performed using CVE-2021-3639?
An attacker can exploit CVE-2021-3639 to perform phishing attacks by redirecting users to malicious websites.
Is user data at risk with CVE-2021-3639?
Yes, user data could be at risk if users are tricked into visiting malicious sites linked through CVE-2021-3639.