Lucene search

K
httpdApache Team FoundationHTTPD:03361C791B9D58CBB71B9C134B524834
HistoryJul 28, 2008 - 12:00 a.m.

Apache Httpd < 2.0.64 : mod_proxy_ftp globbing XSS

2008-07-2800:00:00
Apache Team Foundation
httpd.apache.org
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.054 Low

EPSS

Percentile

93.0%

A flaw was found in the handling of wildcards in the path of a FTP URL with mod_proxy_ftp. If mod_proxy_ftp is enabled to support FTP-over-HTTP, requests containing globbing characters could lead to cross-site scripting (XSS) attacks.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.054 Low

EPSS

Percentile

93.0%