Filter
-Infinity
0
redhat/mod_auth_openidcDenial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc
7.5
EPSS
0.04%
First published (updated )
debian/libapache2-mod-auth-openidcmod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied
7.5
First published (updated )
mod_auth_openidcOpen Redirect in oidc_validate_redirect_url()
6.1
First published (updated )
FedoraURL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc
6.1
First published (updated )
FedoraHardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
FedoraXSS vulnerability when using OIDCPreservePost On in mod_auth_openidc
6.1
First published (updated )
mod_auth_openidcFormat string bug in the Redis cache implementation
7.5
First published (updated )
FedoraOpen Redirect in oidc_validate_redirect_url()
6.1
First published (updated )
Fedoramod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) conditio…
7.5
First published (updated )
DebianA flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs wit…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
mod_auth_openidcA flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs w…
6.1
First published (updated )
redhat/mod_auth_openidcThe "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module befor…
8.6
First published (updated )
mod_auth_openidcThe "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module befor…
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.