Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rxhx-8qf3-fc8h

Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime.

This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime.

This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.

EPSS

Процентиль: 39%
0.0047
Низкий

3.7 Low

CVSS3

Дефекты

CWE-430

Связанные уязвимости

CVSS3: 3.7
ubuntu
15 дней назад

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime. This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.

CVSS3: 3.7
redhat
15 дней назад

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime. This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.

CVSS3: 3.7
nvd
15 дней назад

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime. This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.

CVSS3: 3.7
msrc
7 дней назад

Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories

CVSS3: 3.7
debian
15 дней назад

Deployment of wrong handler vulnerability in Apache HTTP Server allows ...

EPSS

Процентиль: 39%
0.0047
Низкий

3.7 Low

CVSS3

Дефекты

CWE-430