Known vulnerabilities in mod_auth_openidc

Software CPE: cpe:2.3:a:zmartzone:mod_auth_openidc:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mod_auth_openidc mod_auth_openidc is affected by 21 known vulnerabilities: 1 high, 11 medium, 9 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142420 - Improper input validation
CWE-20 High
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142421 - Session Fixation
CWE-384 Medium
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142422 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142423 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142424 - Improper input validation
CWE-20 Low
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142425 - Improper Access Control
CWE-284 Medium
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142426 - Authentication Bypass by Capture-replay
CWE-294 Medium
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU142427 - Information Exposure Through Log Files
CWE-532 Low
No
No
2.4.20.1 13.08.2026 SB2026081391
#VU139915 - Improper Access Control
CWE-284 Low
No
No
2.4.20 28.07.2026 SB20260728105
#VU136688 - Out-of-bounds read
CVE-2026-54789
CWE-125 Medium
No
No
2.4.19.4 02.07.2026 SB2026070228
SB2026071939
SB2026071940
and 5 more
#VU112073 - Improper input validation
CVE-2025-3891
CWE-20 Medium
No
No
2.4.13.2 01.07.2025 SB2025070118
SB2025070119
SB2025070120
and 11 more
#VU107147 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31492
CWE-200 Medium
No
No
2.4.16.11 08.04.2025 SB2025040831
SB2025040833
SB2025040834
and 22 more
#VU86531 - Resource exhaustion
CVE-2024-24814
CWE-400 Medium
No
No
2.4.15.2 15.02.2024 SB2024021511
SB2024022245
SB2024030531
and 9 more
#VU79695 - Use of Externally-Controlled Format String
CVE-2021-32785
CWE-134 Medium
No
No
2.4.9 18.08.2023 SB2021072603
SB2021091342
SB2021101271
and 1 more
#VU79694 - Use of Insufficiently Random Values
CVE-2021-32791
CWE-330 Low
No
No
2.4.9 18.08.2023 SB2021072603
SB2023081884
SB2022051064
and 6 more
#VU79693 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-32786
CWE-601 Low
No
No
2.4.9 18.08.2023 SB2021072603
SB2023081884
SB2022051064
and 6 more
#VU74352 - NULL Pointer Dereference
CVE-2023-28625
CWE-476 Medium
No
No
2.4.13.2 04.04.2023 SB2023040417
SB2023041466
SB2023051853
and 7 more
#VU71703 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-39191
CWE-601 Low
No
No
2.4.9.4 31.01.2023 SB2021090324
SB2023013118
SB2023081884
and 6 more
#VU70325 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-23527
CWE-601 Low
No
No
2.4.12.2 14.12.2022 SB2022121429
SB2023013118
SB2023081884
and 9 more
#VU55291 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32792
CWE-79 Low
No
No
2.4.9 26.07.2021 SB2021072603
SB2023081884
SB2022051064
and 6 more


Showing elements 1 - 20 out of 21