Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-36760

Опубликовано: 17 янв. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9

Описание

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

РелизСтатусПримечание
bionic

released

2.4.29-1ubuntu4.26
devel

released

2.4.55-1ubuntu1
esm-infra-legacy/trusty

needed

esm-infra/bionic

not-affected

2.4.29-1ubuntu4.26
esm-infra/focal

not-affected

2.4.41-4ubuntu3.13
esm-infra/xenial

released

2.4.18-2ubuntu3.17+esm8
focal

released

2.4.41-4ubuntu3.13
jammy

released

2.4.52-1ubuntu4.3
kinetic

released

2.4.54-2ubuntu1.1
lunar

released

2.4.55-1ubuntu1

Показывать по

EPSS

Процентиль: 48%
0.00245
Низкий

9 Critical

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 2 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

CVSS3: 9
nvd
больше 2 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

CVSS3: 9
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 9
debian
больше 2 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling' ...

CVSS3: 9.8
github
больше 2 лет назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

EPSS

Процентиль: 48%
0.00245
Низкий

9 Critical

CVSS3