Описание
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.4.29-1ubuntu4.24 |
| devel | released | 2.4.54-2ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2.4.7-1ubuntu4.22+esm5 |
| esm-infra/bionic | not-affected | 2.4.29-1ubuntu4.24 |
| esm-infra/focal | not-affected | 2.4.41-4ubuntu3.12 |
| esm-infra/xenial | released | 2.4.18-2ubuntu3.17+esm6 |
| focal | released | 2.4.41-4ubuntu3.12 |
| impish | released | 2.4.48-3.1ubuntu3.5 |
| jammy | released | 2.4.52-1ubuntu4.1 |
| kinetic | released | 2.4.54-2ubuntu1 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling' ...
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.
Уязвимость модуля mod_proxy_ajp веб-сервера Apache HTTP Server, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)
EPSS
5 Medium
CVSS2
7.5 High
CVSS3