ISOMAN

CVE

CVE-2019-3877

A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. This mismatch allows an attacker to bypass the redirect URL validation logic in apr_uri_parse function.

Severity
MEDIUM
CVSS
5.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://access.redhat.com/errata/RHSA-2019:0766
  2. https://access.redhat.com/errata/RHSA-2019:3421
  3. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3877
  4. https://github.com/Uninett/mod_auth_mellon/commit/62041428a32de402e0be6ba45fe12df6a83bedb8
  5. https://github.com/Uninett/mod_auth_mellon/issues/35
  6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNW5YMC5TLWVWNJEY6AIWNSNPRAMWPQJ/
  7. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7NLAU7KROWNTHAYSA2S67X347F42L2I/
  8. https://usn.ubuntu.com/3924-1/
  9. https://access.redhat.com/errata/RHSA-2019:0766
  10. https://access.redhat.com/errata/RHSA-2019:3421
  11. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3877
  12. https://github.com/Uninett/mod_auth_mellon/commit/62041428a32de402e0be6ba45fe12df6a83bedb8
  13. https://github.com/Uninett/mod_auth_mellon/issues/35
  14. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNW5YMC5TLWVWNJEY6AIWNSNPRAMWPQJ/
  15. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7NLAU7KROWNTHAYSA2S67X347F42L2I/
  16. https://usn.ubuntu.com/3924-1/