Описание
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | not-affected | 1.4.19-5ubuntu6 |
| feisty | ignored | end of life |
| gutsy | ignored | end of life |
| hardy | ignored | end of life |
| intrepid | ignored | end of life |
| jaunty | not-affected | 1.4.19-5ubuntu6 |
| karmic | not-affected | 1.4.19-5ubuntu6 |
| lucid | not-affected | 1.4.19-5ubuntu6 |
| maverick | not-affected | 1.4.19-5ubuntu6 |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS2
Связанные уязвимости
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redire ...
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
EPSS
7.5 High
CVSS2