CVE-2023-6710

CVE-2023-6710 describes a stored XSS in Apache HTTP Server’s mod_proxy_cluster (mod_cluster) when the attacker injects a script via the alias URL parameter, which can render on the cluster-manager page. Root cause: improper handling in mod_proxy_cluster/mod_cluster allowing stored script executio...