CVE-2007-6421
CVE-2007-6421
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.
EPSS 8,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
apache2 Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2.2.8-1
Mettez à jour vers 2.2.8-1
apache2 Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2.2.8-1
Mettez à jour vers 2.2.8-1
apache2 Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2.2.8-1
Mettez à jour vers 2.2.8-1
Sources originales
- http://secunia.com/advisories/28749
- http://securityreason.com/securityalert/3523
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html
- http://secunia.com/advisories/28526
- http://www.vupen.com/english/advisories/2008/0924/references
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8651
- http://www.securityfocus.com/bid/27236
- http://www.redhat.com/support/errata/RHSA-2008-0008.html
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html
- http://www.redhat.com/support/errata/RHSA-2008-0009.html
- http://secunia.com/advisories/29420
- http://httpd.apache.org/security/vulnerabilities_22.html
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39474
- http://www.vupen.com/english/advisories/2008/0048
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html
- http://www.securityfocus.com/archive/1/486169/100/0/threaded
- http://docs.info.apple.com/article.html?artnum=307562
- http://www.ubuntu.com/usn/usn-575-1
- http://secunia.com/advisories/29640
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10664
- http://secunia.com/advisories/28977
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:016
- https://nvd.nist.gov/vuln/detail/CVE-2007-6421