Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-26377

Опубликовано: 09 июн. 2022
Источник: ubuntu
Приоритет: medium
CVSS2: 5
CVSS3: 7.5

Описание

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.

РелизСтатусПримечание
bionic

released

2.4.29-1ubuntu4.24
devel

released

2.4.54-2ubuntu1
esm-infra-legacy/trusty

released

2.4.7-1ubuntu4.22+esm5
esm-infra/bionic

released

2.4.29-1ubuntu4.24
esm-infra/focal

released

2.4.41-4ubuntu3.12
esm-infra/xenial

released

2.4.18-2ubuntu3.17+esm6
focal

released

2.4.41-4ubuntu3.12
impish

released

2.4.48-3.1ubuntu3.5
jammy

released

2.4.52-1ubuntu4.1
kinetic

released

2.4.54-2ubuntu1

Показывать по

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 3 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.

CVSS3: 7.5
nvd
больше 3 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.

CVSS3: 7.5
debian
больше 3 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling' ...

CVSS3: 7.5
github
больше 3 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.

CVSS3: 6.1
fstec
больше 3 лет назад

Уязвимость модуля mod_proxy_ajp веб-сервера Apache HTTP Server, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)

5 Medium

CVSS2

7.5 High

CVSS3