Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2j72-xfgv-gj26

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

EPSS

Процентиль: 54%
0.00308
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
больше 13 лет назад

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

EPSS

Процентиль: 54%
0.00308
Низкий

Дефекты

CWE-20