Log in Start free

Vulnerability · Published Dec 14, 2022 · Assigned by GitHub_M

CVE-2022-23527Open Redirect in oidc_validate_redirect_url()

Medium 4.7

In plain English

A medium-severity open redirect in mod_auth_openidc from zmartzone. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)0.9%top 38.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidc_validate_redirect_url() does not properly check for URLs that start with /\t, leading to an open redirect. This issue has been patched in version 2.4.12.2. Users unable to upgrade can mitigate the issue by configuring mod_auth_openidc to only allow redirection when the destination matches a given regular expression with OIDCRedirectURLsAllowed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8cjose0.6.1-4.module_el8.9.0+3631+0ced13d7ALSA-2023:6940
AlmaLinux:8cjose-devel0.6.1-4.module_el8.9.0+3631+0ced13d7ALSA-2023:6940
AlmaLinux:8mod_auth_openidc2.4.9.4-5.module_el8.9.0+3631+0ced13d7ALSA-2023:6940
AlmaLinux:9mod_auth_openidc2.4.9.4-4.el9ALSA-2023:6365
Debian:12libapache2-mod-auth-openidc2.4.12.2-1DEBIAN-CVE-2022-23527
Debian:13libapache2-mod-auth-openidc2.4.12.2-1DEBIAN-CVE-2022-23527
Debian:14libapache2-mod-auth-openidc2.4.12.2-1DEBIAN-CVE-2022-23527
Rocky Linux:8cjose0:0.6.1-4.module+el8.9.0+1384+4b58c166RLSA-2023:6940
Rocky Linux:8mod_auth_openidc0:2.4.9.4-5.module+el8.9.0+1384+4b58c166RLSA-2023:6940
Ubuntu:22.04:LTSlibapache2-mod-auth-openidcno fix listedUBUNTU-CVE-2022-23527

Affected products (as reported)

VendorProductVersions
zmartzone mod_auth_openidc < 2.4.12.2

Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

References