mod_auth_openidc — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in mod_auth_openidc, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-31492	mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data CWE-200	7.5^AI	High^AI	2025-04-06
CVE-2024-24814	Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc CWE-400	7.5	High	2024-02-13
CVE-2023-28625	mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied CWE-476	7.5	High	2023-04-03
CVE-2022-23527	Open Redirect in oidc_validate_redirect_url() CWE-601	4.7	Medium	2022-12-14
CVE-2021-39191	URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc CWE-601	4.7	Medium	2021-09-03
CVE-2021-32792	XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc CWE-79	3.1	Low	2021-07-26
CVE-2021-32791	Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc CWE-323	5.9	Medium	2021-07-26
CVE-2021-32786	Open Redirect in oidc_validate_redirect_url() CWE-601	4.7	Medium	2021-07-22
CVE-2021-32785	Format string bug in the Redis cache implementation CWE-134	5.3	Medium	2021-07-22
CVE-2021-20718	mod_auth_openidc 资源管理错误漏洞	7.5	-	2021-05-20
CVE-2019-14857	ZmartZone IAM mod_auth_openidc 输入验证错误漏洞 CWE-601	6.1	-	2019-11-26
CVE-2019-1010247	ZmartZone IAM mod_auth_openidc 跨站脚本漏洞	6.1	-	2019-07-19

All 12 known CVE vulnerabilities affecting mod_auth_openidc with full Chinese analysis, references, and POCs where available.