2 matches found
Design/Logic Flaw
The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...
4.3CVSS6.3AI score0.18443EPSS
SaveExploits2References59Affected Software3
CVE-2010-0434
The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...
4.3CVSS7.2AI score0.18443EPSS
SaveExploits2References3
20