CVE-2021-32792: Fedoraproject Fedora

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• Openidc Mod Auth Openidc: before 2.4.9 (fixed in 2.4.9)

Published 2021-07-26. Last modified 2026-06-17.