| Package | Affected versions | Patched versions |
|---|---|---|
| mod auth mellon | ≤ 0.13.0 |
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free