VDB
BDU%3A2020-05766
BDU%3A2020-05766
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Уязвимость функции apr_uri_parse() модуля аутентификации mod_auth_mellon сервера Apache HTTP Server, позволяющая нарушителю перенаправить пользователя на вредоносный сайт
Risk Scores
CVSS 2.0
6.400000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Apache Software Foundation, Fedora Project | Red Hat Enterprise Linux, Ubuntu, HTTP Server, Fedora |
Timeline
- Dec 22, 2020 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
References
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-13038.html?_ga=2.55464875.1010625801.1582602952-1733711738.1578988174 url
- https://github.com/Uninett/mod_auth_mellon/issues/35#issuecomment-503974885 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XU5GVFZW3C2M4ZBL4F7UP7N24FNUCX4E/ url
- https://access.redhat.com/security/cve/cve-2019-13038 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5E3JVHURJJNDP63CKVX5O5MJAGCQV4K/ advisory
- https://ubuntu.com/security/notices/USN-4291-1 advisory