CVE-2022-23527: medium-severity vulnerability in zmartzone mod_auth_openidc
Open Redirect in oidc_validate_redirect_url()
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.9%
mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidc_validate_redirect_url() does not properly check for URLs that start with /\t, leading to an open redirect. This issue has been patched in version 2.4.12.2. Users unable to upgrade can mitigate the issue by configuring mod_auth_openidc to only allow redirection when the destination matches a given regular expression with OIDCRedirectURLsAllowed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Affected products
zmartzone · mod_auth_openidcRelated CVEs — zmartzone mod_auth_openidc
In the same product, most dangerous first.
CVE-2021-32785MEDIUMFormat string bug in the Redis cache implementationEPSS 2.7%CVE-2021-32786MEDIUMOpen Redirect in oidc_validate_redirect_url()EPSS 2.4%CVE-2021-39191MEDIUMURL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidcEPSS 1.7%CVE-2021-32792LOWXSS vulnerability when using OIDCPreservePost On in mod_auth_openidcEPSS 1.5%CVE-2021-32791MEDIUMHardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidcEPSS 1.5%