| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| http server | ≥ 2.4.0, ≤ 2.4.39 | |
| communications element manager | = 8.0.0= 8.1.0= 8.1.1= 8.2.0 | |
| enterprise manager ops center | = 12.3.3= 12.4.0 | |
| secure global desktop | = 5.4= 5.5 | |
| software collection | = 1.0 |
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí