CVE-2021-39191CWE-601

URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc

Medium · published September 3, 2021

CVSS v3.1
4.7
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of mod_auth_openidc was reported to be vulnerable to an open redirect attack by supplying a crafted URL in the `target_link_uri` parameter. A patch in version 2.4.9.4 made it so that the `OIDCRedirectURLsAllowed` setting must be applied to the `target_link_uri` parameter. There are no known workarounds aside from upgrading to a patched version.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01735 · 77.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2021-09-03T00:00Z
EPSS history
Timeline
  • 03 SEP 00:00Z
    URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc
    cvelistv5