Advisories · Technology

zmartzone mod_auth_openidc.

Every CVE that names zmartzone mod_auth_openidc among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-23527 CVE record

CVSS 4.7 Medium

Open Redirect in oidc_validate_redirect_url()
- zmartzone mod_auth_openidc
- Open redirect
Not analysed yet 14 Dec 2022
CVE-2021-39191 CVE record

CVSS 4.7 Medium

URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc
- zmartzone mod_auth_openidc
- Open redirect
Not analysed yet 3 Sept 2021
CVE-2021-32792 CVE record

CVSS 3.1 Low

XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc
- zmartzone mod_auth_openidc
- Cross-site scripting (XSS)
Not analysed yet 26 Jul 2021
CVE-2021-32791 CVE record

CVSS 5.9 Medium

Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc
- zmartzone mod_auth_openidc
- Weak cryptography or TLS
- CWE-323
Not analysed yet 26 Jul 2021
CVE-2021-32786 CVE record

CVSS 4.7 Medium

Open Redirect in oidc_validate_redirect_url()
- zmartzone mod_auth_openidc
- Open redirect
Not analysed yet 22 Jul 2021
CVE-2021-32785 CVE record

CVSS 5.3 Medium

Format string bug in the Redis cache implementation
- zmartzone mod_auth_openidc
- Memory corruption
Not analysed yet 22 Jul 2021
CVE-2021-20718 CVE record

ZmartZone mod_auth_openidc: mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service…
- ZmartZone mod_auth_openidc
Not analysed yet 20 May 2021