https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:39:38.163272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-3878 CVE-2019-3878 2026-10-09T12:39:38.182823+00:00

Affected: uninett mod_auth_mellon

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.