CVE-2019-10092 in Secure Global Desktopinfo

Summary

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

03/26/2019

Entries

2

CPE

ready

CWE

CWE-79

Exploit

Download

CVSS

5.2

EPSS

0.82379

CTI

0.00

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!