| Package | Affected versions | Patched versions |
|---|---|---|
| mod auth mellon | ≤ 0.14.2 | |
| zfs storage appliance kit | = 8.8 |
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free