https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T20:54:51.422507+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-6807 CVE-2017-6807 2026-10-06T20:54:51.425097+00:00

mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.

 https://vulnerability.circl.lu/vuln/usn-4597-1 USN-4597-1 — libapache2-mod-auth-mellon vulnerabilities 2026-10-06T20:54:51.425201+00:00

Affected: Ubuntu:16.04:LTS: libapache2-mod-auth-mellon

François Kooman discovered that mod_auth_mellon incorrectly handled cookies. An attacker could possibly use this issue to cause a Cross-Site Session Transfer attack. (CVE-2017-6807)

It was discovered that mod_auth_mellon incorrectly handled certain requests. An attacker could possibly use this issue to redirect a user to a malicious URL. (CVE-2019-3877)

It was discovered that mod_auth_mellon incorrectly handled certain requests. An attacker could possibly use this issue to access sensitive information. (CVE-2019-3878)