Lucene search

K
githubexploitF607361B-6369-5DF5-9B29-E90FA29DC565
HistoryJun 24, 2024 - 10:20 p.m.

Exploit for HTTP Request Smuggling in Apache Http Server

2024-06-2422:20:57
1966
mod_proxy
http request smuggling
apache http server
cve 2023 25690
rewriterule
proxypassmatch
request splitting
cache poisoning
access controls
update
python

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.015

Percentile

87.0%

CVE 2023 25690 Description

Some mod_proxy configurations on Ap…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.015

Percentile

87.0%