AZL-6482
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6482.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-6482
- Upstream
- Published
- 2021-07-26T17:15:08Z
- Modified
- 2026-04-01T05:20:24.477833Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- CVE-2021-32792 affecting package httpd for versions less than 2.4.52-1
- Details
-
modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using
OIDCPreservePost On. - References