CVE-2015-0298

MEDIUM 4.3CVE-2015-0298 · Published 24/08/2015 · updated 17/06/2026

In short

CVE-2015-0298 is a MEDIUM (CVSS 4.3) vulnerability affecting mod cluster (redhat).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mod cluster redhat	`≤ 1.3.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.

References

rhn.redhat.com/errata/RHSA-2015-1641.html · Vendor Advisory
rhn.redhat.com/errata/RHSA-2015-1642.html · Vendor Advisory
issues.jboss.org/browse/MODCLUSTER-453

More vulnerabilities in mod cluster

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free