https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:08:33 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2387 <p><strong>Affected:</strong> AlmaLinux:9: mod_jk, AlmaLinux:9: mod_proxy_cluster</p> <p>The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine.</p> <p>The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.</p> <p>Security Fix(es):</p> <p>* httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure (CVE-2023-41081) * mod_cluster/mod_proxy_cluster: Stored Cross site Scripting (CVE-2023-6710)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: mod_jk, AlmaLinux:9: mod_proxy_cluster</p> <p>The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine.</p> <p>The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.</p> <p>Security Fix(es):</p> <p>* httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure (CVE-2023-41081) * mod_cluster/mod_proxy_cluster: Stored Cross site Scripting (CVE-2023-6710)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2387 https://cve.radiocsirt.org/vuln/euvd-2026-372470 EUVD-2026-372470 https://cve.radiocsirt.org/vuln/euvd-2026-372470 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6710 <p>A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the &#39;alias&#39; parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page.</p> <p>A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the &#39;alias&#39; parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6710 https://cve.radiocsirt.org/vuln/ghsa-5xpv-wgx6-ggmv <p>A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the &#39;alias&#39; parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page. The impact of this vulnerability is considered as Low, as the cluster_manager URL should not be exposed outside and is protected by user/password.</p> <p>A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the &#39;alias&#39; parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page. The impact of this vulnerability is considered as Low, as the cluster_manager URL should not be exposed outside and is protected by user/password.</p> https://cve.radiocsirt.org/vuln/ghsa-5xpv-wgx6-ggmv https://cve.radiocsirt.org/vuln/gsd-2023-6710 gsd-2023-6710 https://cve.radiocsirt.org/vuln/gsd-2023-6710 https://cve.radiocsirt.org/vuln/rhsa-2024:1316 <p>openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow mod_cluster/mod_proxy_cluster: Stored Cross site Scripting httpd: mod_macro: out-of-bounds read vulnerability curl: information disclosure by exploiting a mixed case flaw curl: excessively long file name may lead to unknown HSTS status</p> <p>openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow mod_cluster/mod_proxy_cluster: Stored Cross site Scripting httpd: mod_macro: out-of-bounds read vulnerability curl: information disclosure by exploiting a mixed case flaw curl: excessively long file name may lead to unknown HSTS status</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1316 https://cve.radiocsirt.org/vuln/rhsa-2024:2387 <p>mod_cluster/mod_proxy_cluster: Stored Cross site Scripting httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure</p> <p>mod_cluster/mod_proxy_cluster: Stored Cross site Scripting httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2024:2387 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3106 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache HTTP Server im Modul mod_proxy_cluster ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache HTTP Server im Modul mod_proxy_cluster ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3106