PatchTheCVEmod auth mellon vulnerabilities and fixes
Recent CVEs affecting mod auth mellon, with upgrade or downgrade steps. 1 tracked.
Also searched as: modauthmellon.
mod auth mellon has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-08-22. Highest priority: CVE-2021-3639 (score 37/100).
- CVE-2021-3639 MEDIUM 6.1 UPGRADE A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly
FAQ
How do I fix mod auth mellon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mod auth mellon being exploited right now?
None of the tracked mod auth mellon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mod auth mellon CVE should I patch first?
CVE-2021-3639 currently ranks highest (37/100): A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly.