Lucene search

K
httpdApache Team FoundationHTTPD:1E858A305C3DEA1B5E9A23EE1352B1B3
HistoryMay 31, 2012 - 12:00 a.m.

Apache Httpd < 2.2.23 : XSS in mod_negotiation when untrusted uploads are supported

2012-05-3100:00:00
Apache Team Foundation
httpd.apache.org
14

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%

Possible XSS for sites which use mod_negotiation and allow untrusted uploads to locations which have MultiViews enabled. Note: This issue is also known as CVE-2008-0455.

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%