FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-16 19:33:48 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
7bba5b3b-1b7f-11ec-b335-d4c9ef517024	mod_auth_mellon -- Redirect URL validation bypass Jakub Hrozek reports: Version 0.17.0 and older of mod_auth_mellon allows the redirect URL validation to be bypassed by specifying an URL formatted as ///fishing-site.example.com/logout.html Discovery 2021-07-30 Entry 2021-09-22 mod_auth_mellon < 0.18.0 CVE-2019-13038 https://github.com/latchset/mod_auth_mellon/releases/tag/v0.18.0

VuXML ID

Description

7bba5b3b-1b7f-11ec-b335-d4c9ef517024

mod_auth_mellon -- Redirect URL validation bypass

Jakub Hrozek reports:

Version 0.17.0 and older of mod_auth_mellon allows the redirect URL validation to be bypassed by specifying an URL formatted as ///fishing-site.example.com/logout.html

Discovery 2021-07-30
Entry 2021-09-22
mod_auth_mellon

< 0.18.0

CVE-2019-13038
https://github.com/latchset/mod_auth_mellon/releases/tag/v0.18.0