Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hrh5-4ffc-228q

Опубликовано: 01 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

EPSS

Процентиль: 99%
0.78146
Высокий

8.1 High

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 8.1
ubuntu
12 месяцев назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 5.3
redhat
12 месяцев назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 8.1
nvd
12 месяцев назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 8.1
msrc
11 месяцев назад

Описание отсутствует

CVSS3: 8.1
debian
12 месяцев назад

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier ...

EPSS

Процентиль: 99%
0.78146
Высокий

8.1 High

CVSS3

Дефекты

CWE-116