CVE-2019-10092
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 on Exploit-DB, 2 proofs of concept on GitHub, 1 Nuclei template
Summary
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.
Timeline
- CVE published
- Public exploit on Exploit-DB
EDB-47688
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- n/a Apache HTTP Server
2.4.0 to 2.4.39
References 29
lists.apache.org
- thread.html/73768e31e0fcae03e12f5aa87da1cb26dece39327f3c32060baa3e94@<announce.httpd.apache.org>
- thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@<cvs.httpd.apache.org>
- thread.html/r0a83b112cd9701ef8a2061c8ed557f3dc9bb774d4da69fbb91bbc3c4@<users.httpd.apache.org>
- thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@<cvs.httpd.apache.org>
- thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@<cvs.httpd.apache.org>