ZmartZone mod_auth_openidc

• CVE-2022-23527 Medium 4.7 Open Redirect in oidc_validate_redirect_url() 0.9%
• CVE-2021-39191 Medium 4.7 URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc 1.7%
• CVE-2021-32792 Low 3.1 XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc 1.5%
• CVE-2021-32791 Medium 5.9 Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc 1.5%
• CVE-2021-32786 Medium 4.7 Open Redirect in oidc_validate_redirect_url() 2.4%
• CVE-2021-32785 Medium 5.3 Format string bug in the Redis cache implementation 2.7%
• CVE-2021-20718 Unrated mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors. 3.4%