https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:42:48.238984+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2387 ALSA-2024:2387 — Moderate: mod_jk and mod_proxy_cluster security update 2026-10-03T08:42:48.359293+00:00

Affected: AlmaLinux:9: mod_jk, AlmaLinux:9: mod_proxy_cluster

The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine.

The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.

Security Fix(es):

* httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure (CVE-2023-41081) * mod_cluster/mod_proxy_cluster: Stored Cross site Scripting (CVE-2023-6710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-372470 EUVD-2026-372470 2026-10-03T08:42:48.359355+00:00 EUVD-2026-372470 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6710 fkie_cve-2023-6710 2026-10-03T08:42:48.359372+00:00

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page.

 https://cve.radiocsirt.org/vuln/ghsa-5xpv-wgx6-ggmv GHSA-5xpv-wgx6-ggmv 2026-10-03T08:42:48.359397+00:00

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page. The impact of this vulnerability is considered as Low, as the cluster_manager URL should not be exposed outside and is protected by user/password.

 https://cve.radiocsirt.org/vuln/gsd-2023-6710 gsd-2023-6710 2026-10-03T08:42:48.359415+00:00 gsd-2023-6710 https://cve.radiocsirt.org/vuln/rhsa-2024:1316 RHSA-2024:1316 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update 2026-10-03T08:42:48.359426+00:00

openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow mod_cluster/mod_proxy_cluster: Stored Cross site Scripting httpd: mod_macro: out-of-bounds read vulnerability curl: information disclosure by exploiting a mixed case flaw curl: excessively long file name may lead to unknown HSTS status

 https://cve.radiocsirt.org/vuln/rhsa-2024:2387 RHSA-2024:2387 — Red Hat Security Advisory: mod_jk and mod_proxy_cluster security update 2026-10-03T08:42:48.359452+00:00

mod_cluster/mod_proxy_cluster: Stored Cross site Scripting httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3106 WID-SEC-W-2023-3106 — Apache HTTP Server (mod_proxy_cluster): Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T08:42:48.359470+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache HTTP Server im Modul mod_proxy_cluster ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.