Lucene search

K
httpdApache Team FoundationHTTPD:78326E829B3FEC17BA22DA6D97B7E673
HistorySep 20, 2002 - 12:00 a.m.

Apache Httpd < 1.3.27 : Error page XSS using wildcard DNS

2002-09-2000:00:00
Apache Team Foundation
httpd.apache.org
16

0.971 High

EPSS

Percentile

99.8%

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is “Off” and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header.

0.971 High

EPSS

Percentile

99.8%