Lucene search
+L

90 matches found

RedhatCVE
RedhatCVE
added 2023/03/07 4:30 p.m.111 views

CVE-2023-27522

An HTTP Response Smuggling vulnerability was found in the Apache HTTP Server via modproxyuwsgi. This security issue occurs when special characters in the origin response header can truncate or split the response forwarded to the client. Mitigation Mitigation for this issue is either not available...

7.5CVSS7.9AI score0.02134EPSS
SaveExploits0References4
NVD
NVD
added 2023/03/07 4:15 p.m.56 views

CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS8.5AI score0.02134EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/07 4:15 p.m.6 views

DEBIAN-CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.5AI score0.02134EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/07 3:09 p.m.1651 views

CVE-2023-27522

CVE-2023-27522 affects Apache HTTP Server (httpd) versions 2.4.30–2.4.55 via mod_proxy_uwsgi. The issue is HTTP Response Smuggling where special characters in the origin response header can truncate or split the response forwarded to the client. AlmaLinux and ALAS advisories explicitly reference ...

7.5CVSS8.8AI score0.02134EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/07 3:09 p.m.25 views

CVE-2023-27522 Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

8.8AI score0.02134EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2023/03/07 3:09 p.m.61 views

CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.5AI score0.02134EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/03/07 3:09 p.m.106 views

CVE-2023-27522 Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

8.8AI score0.02134EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/03/07 12:00 a.m.468 views

Apache 2.4.x < 2.4.56 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.56. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.56 advisory. - HTTP request splitting with modrewrite and modproxy: Some modproxy configurations on Apache HTTP Server versions 2.4.0 throug...

9.8CVSS7.1AI score0.84508EPSS
SaveExploits5References2
Kaspersky
Kaspersky
added 2023/03/07 12:00 a.m.138 views

KLA48513 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. HTTP request smuggling vulnerability in modrewrite and modproxy can be exploited to bypass security...

9.8CVSS8.2AI score0.84508EPSS
SaveExploits5References4
CVE
CVE
added 2021/04/08 3:13 p.m.72 views

CVE-2021-27522

CVE-2021-27522 affects Learnsite 1.2.5.0. A remote privilege-escalation vulnerability exists in /Manager/index.aspx via the JudgIsAdmin() function. By modifying the first letter of a user cookie key, an attacker can obtain the administrator cookie key, enabling elevated access. The connected docu...

8.8CVSS8.8AI score0.01109EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder