Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hrh5-4ffc-228q

Опубликовано: 01 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

EPSS

Процентиль: 98%
0.25878
Средний

8.1 High

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 2 лет назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 5.3
redhat
около 2 лет назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 8.1
nvd
около 2 лет назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 8.1
msrc
около 2 лет назад

Apache HTTP Server proxy encoding problem

CVSS3: 8.1
debian
около 2 лет назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier ...

EPSS

Процентиль: 98%
0.25878
Средний

8.1 High

CVSS3

Дефекты

CWE-116