CVE-2024-24814

>= 2.0.0 and <= 2.4.15.1

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements

7.5HIGH

CVE-2023-28625

>= 2.0.0 and < 2.4.13.2

mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect R

7.5HIGH

CVE-2022-23527

< 2.4.12.2

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior

4.7MEDIUM

CVE-2021-39191

< 2.4.9.4

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Rely

4.7MEDIUM

CVE-2021-32792

< 2.4.9

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Rely

3.1LOW

CVE-2021-32791

< 2.4.9

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Rely

5.9MEDIUM

CVE-2021-32786

< 2.4.9

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Rely

4.7MEDIUM

CVE-2021-32785

< 2.4.9

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Rely

5.3MEDIUM

CVE-2021-20718

>= 2.4.0 and <= 2.4.7

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.

7.5HIGH

CVE-2019-20479

< 2.4.1

A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the

6.1MEDIUM

CVE-2019-14857

< 2.4.0.1

A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar t

6.1MEDIUM

CVE-2019-1010247

< 2.3.10.2

ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Redirecting the use

6.1MEDIUM

CVE-2017-6059

< 2.1.4

Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows

7.5HIGH

CVE-2017-6413

<= 2.1.5

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Se

8.6HIGH

CVE-2017-6062

<= 2.1.4

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Se

8.6HIGH