Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-3891
7.5
HIGHCVSS v3
Published
April 29, 2025
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.
OpenIDC/mod_auth_openidc
GitHubOpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
GitHubOpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPdNVD