Boletines de Vulnerabilidades |
CVE-2025-3891 |
|
| Software afectado | APACHE |
| A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-3891 | |














