CVE-2021-32792

Published: 2021-07-26T17:15Z

Last Modified: 2024-11-21T06:07Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt