Описание
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.2.22-6ubuntu3 |
| hardy | released | 2.2.8-1ubuntu0.24 |
| lucid | released | 2.2.14-5ubuntu8.10 |
| natty | ignored | end of life |
| oneiric | released | 2.2.20-1ubuntu1.3 |
| precise | released | 2.2.22-1ubuntu1.2 |
| quantal | released | 2.2.22-6ubuntu2.1 |
| upstream | needs-triage |
Показывать по
2.6 Low
CVSS2
Связанные уязвимости
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
Multiple cross-site scripting (XSS) vulnerabilities in the make_varian ...
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
ELSA-2013-0512: httpd security, bug fix, and enhancement update (LOW)
2.6 Low
CVSS2