Boletines de Vulnerabilidades

CVE-2025-3891

   
Software afectado APACHE
 
A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-3891