tocsin

Debian/libapache2-mod-auth-openidc: high 7.5

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPrese

Action: Upgrade libapache2-mod-auth-openidc to 2.4.12.3-2+deb12u4 or later.

Affected

introducedfixedlast affected
02.4.12.3-2+deb12u4-

Fixed versions

2.4.12.3-2+deb12u4

Sources

published · modified · JSON