A vulnerability classified as problematic has been found in ZmartZone mod_auth_openidc up to 2.4.8. This affects some unknown functionality of the component OIDCPreservePost Handler. Upgrading to version 2.4.9 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
ZmartZone mod_auth_openidc up to 2.4.8 OIDCPreservePost cross site scripting
- Virtual Patching
- July 27, 2021
- 10:05 am
Contact us to get started
CVE-2023-6514 : HUAWEI AJMD-370S 103.1.0.110(SP12C00E2R1P2) BLUETOOTH MODULE LOGIC ERROR
Description The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this
CVE-2023-22523 : ATLASSIAN ASSETS DISCOVERY CLOUD ASSETS DISCOVERY AGENT REMOTE CODE EXECUTION
Description This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets
CVE-2023-49070 : APACHE OFBIZ UP TO 18.12.9 CODE INJECTION
Description Pre-auth RCE in Apache Ofbiz 18.12.09. It’s due to XML-RPC no longer maintained still present. This issue affects Apache