Mod_auth_openidc - Vulncode-DB

Repositories	https://github.com/pingidentity/mod_auth_openidc
#Vulnerabilities	14

Date	Id	Summary	Products	Score	Patch	Annotated
2023-04-03	CVE-2023-28625	mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is set and a crafted cookie supplied, a NULL pointer dereference would occur, resulting in a segmentation fault. This could be used in a Denial-of-Service attack and thus presents an availability risk. Version 2.4.13.2 contains a patch for this issue. As a workaround, avoid...	Mod_auth_openidc	7.5
2019-07-19	CVE-2019-1010247	ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/mod_auth_openidc.c, Line: 3109. The fixed version is: 2.3.10.2.	Mod_auth_openidc	6.1