CVE-2019-1010247

Name of the Vulnerable Software and Affected Versions: ZmartZone IAM mod auth openidc versions 2.3.10.1 and earlier

Description: The issue affects the ZmartZone IAM mod auth openidc, allowing for Cross Site Scripting (XSS) attacks. This can lead to redirecting the user to a phishing page or interacting with the application on behalf of the user. The vulnerable component is located in the file src/mod auth openidc.c at line 3109.

Recommendations: For versions 2.3.10.1 and earlier, update to version 2.3.10.2 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable component to minimize the risk of exploitation.