CVE-2021-3639
CVE-2021-3639
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 ago 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.
Produtos afetados
n/a · mod_auth_mellonQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →