Количество 7
Количество 7

CVE-2024-10306
A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.

CVE-2024-10306
A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.
CVE-2024-10306
A vulnerability was found in mod_proxy_cluster. The issue is that the ...
GHSA-jm2g-3f56-rvvh
A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.
ELSA-2025-9466
ELSA-2025-9466: mod_proxy_cluster security update (MODERATE)
ELSA-2025-9434
ELSA-2025-9434: mod_proxy_cluster security update (MODERATE)
ELBA-2025-5309
ELBA-2025-5309: mod_proxy_cluster bug fix and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2024-10306 A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic. | CVSS3: 5.4 | 0% Низкий | 5 месяцев назад |
![]() | CVE-2024-10306 A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic. | CVSS3: 5.4 | 0% Низкий | 3 месяца назад |
CVE-2024-10306 A vulnerability was found in mod_proxy_cluster. The issue is that the ... | CVSS3: 5.4 | 0% Низкий | 3 месяца назад | |
GHSA-jm2g-3f56-rvvh A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic. | CVSS3: 5.4 | 0% Низкий | 3 месяца назад | |
ELSA-2025-9466 ELSA-2025-9466: mod_proxy_cluster security update (MODERATE) | около 1 месяца назад | |||
ELSA-2025-9434 ELSA-2025-9434: mod_proxy_cluster security update (MODERATE) | около 1 месяца назад | |||
ELBA-2025-5309 ELBA-2025-5309: mod_proxy_cluster bug fix and enhancement update (MODERATE) | около 2 месяцев назад |
Уязвимостей на страницу