CVE-2019-14857CWE-601

A flaw was found in mod_auth_openidc before version 2.4.0.1

Medium · published November 26, 2019

CVSS v3.0
5.8
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in mod_auth_mellon.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01598 · 75.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2019-11-26T11:56Z
EPSS history
Timeline
  • 26 NOV 11:56Z
    A flaw was found in mod_auth_openidc before version 2.4.0.1
    cvelistv5