mod auth mellon project vulnerabilities

Recent CVEs affecting mod auth mellon project products. 3 tracked.

mod auth mellon project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2019-06-29. Highest priority: CVE-2019-3878 (score 60/100).

• CVE-2019-3878 HIGH 8.1 UPGRADE MITIGATE A vulnerability was found in mod_auth_mellon before v0.14.2
• CVE-2019-3877 MEDIUM 5.8 UPGRADE MITIGATE A vulnerability was found in mod_auth_mellon before v0.14.2
• CVE-2019-13038 MEDIUM 6.1 UPGRADE DOWNGRADE mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omit

FAQ

How do I fix mod auth mellon project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mod auth mellon project being exploited right now?

None of the tracked mod auth mellon project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mod auth mellon project CVE should I patch first?

CVE-2019-3878 currently ranks highest (60/100): A vulnerability was found in mod_auth_mellon before v0.14.2.

Products

• mod auth mellon

RSS feed for mod auth mellon project · ← Back to latest CVEs