Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-2024

Высокий

ALT-PU-2024-2024: package apache2-mod_wsgi update to version 4.9.4-alt0.p10.1

Источник
errata.altlinux.org
Дата публикации
13.02.2024
Дата обновления
13.02.2024
Устраненные уязвимости
2

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades apache2-mod_wsgi to version 4.9.4-alt0.p10.1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 4 лет назад

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

CVSS3: 7.3
redhat
больше 4 лет назад

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

CVSS3: 7.5
nvd
около 4 лет назад

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

CVSS3: 7.5
msrc
около 4 лет назад

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

CVSS3: 7.5
debian
около 4 лет назад

A vulnerability was found in mod_wsgi. The X-Client-IP header is not r ...