Lucene search
+L

1 matches found

OSV
OSV
added 2025/07/16 7:56 a.m.15 views

BIT-APACHE-2024-47252 Apache HTTP Server: mod_ssl error log variable escaping

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

7.5CVSS5.9AI score0.00693EPSS
SaveExploits0References5
Rows per page
Query Builder