CVE-2024-24814
Published Feb 13, 2024mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In…
Vendor/product archive
openidc / mod_auth_openidc CVEs
Beta · best-effort15 CVEs tagged to openidc / mod_auth_openidc — 0 Critical, 6 High, 8 Medium, 1 Low, 0 Unrated.
CVE-2023-28625
Published Apr 3, 2023mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 thr…
CVE-2022-23527
Published Dec 14, 2022mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When p…
CVE-2021-39191
Published Sep 3, 2021mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID…
CVE-2021-32792
Published Jul 26, 2021mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID…
CVE-2021-32791
Published Jul 26, 2021mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID…
CVE-2021-32786
Published Jul 22, 2021mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID…
CVE-2021-32785
Published Jul 22, 2021mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID…
CVE-2021-20718
Published May 20, 2021mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.
CVE-2019-20479
Published Feb 20, 2020A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning.
CVE-2019-14857
Published Nov 26, 2019A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in mod_auth_mellon.
CVE-2019-1010247
Published Jul 19, 2019ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Redirecting the user to a phishing page or interacting with the appl…
CVE-2017-6059
Published Apr 12, 2017Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote attackers to spoof page content via a mali…
CVE-2017-6413
Published Mar 2, 2017The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeade…
CVE-2017-6062
Published Mar 2, 2017The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeade…
Showing 1-15 of 15 CVEsPage 1 of 1