3 matches found
mod_auth_openidc: open redirect in oidc_validate_redirect_url()
A flaw was found in modauthopenidc where it does not sanitize redirection URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest...
6.1CVSS7.2AI score0.02364EPSS
SaveExploits1References5
20