CVE-2012-4001

2022-10-0316:15:34

mitre

www.cve.org

mod_pagespeed

apache http server

host name verification

remote attacks

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.4%

JSON

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.