Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mod_auth_mellon 安全漏洞
Vulnerability Description
mod_auth_mellon是一个提供了简单SAML（安全断言标记语言）2.0服务的Apache模块。 mod_auth_mellon 0.13.1之前的版本中存在安全漏洞。攻击者可利用该漏洞在同一个服务器上将会话cookie复制到其他不同的Web站点，获取站点的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A