| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.0= 2.0.28= 2.0.32= 2.0.34= 2.0.35= 2.0.36= 2.0.37= 2.0.38= 2.0.39= 2.0.40= 2.0.41= 2.0.42= 2.0.43= 2.0.44= 2.0.45= 2.0.46= 2.0.47= 2.0.48= 2.0.49= 2.0.50= 2.0.51= 2.0.52= 2.0.53= 2.0.54= 2.0.55= 2.0.56= 2.0.57= 2.0.58= 2.0.59= 2.0.60= 2.0.61= 2.0.9= 2.1= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.8= 2.2= 2.2.1= 2.2.2= 2.2.3= 2.2.4 |
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free