You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by co...@apache.org on 2025/12/04 13:59:43 UTC
(httpd-site) branch main updated: typoes
This is an automated email from the ASF dual-hosted git repository.
covener pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/httpd-site.git
The following commit(s) were added to refs/heads/main by this push:
new 8a98891 typoes
8a98891 is described below
commit 8a988913b30bae487a05efef319519d02e9a27ca
Author: Eric Covener <ec...@us.ibm.com>
AuthorDate: Thu Dec 4 08:59:37 2025 -0500
typoes
---
content/security/json/CVE-2025-66200.json | 7 +++----
1 file changed, 3 insertions(+), 4 deletions(-)
diff --git a/content/security/json/CVE-2025-66200.json b/content/security/json/CVE-2025-66200.json
index 0b6d3f5..c7d4d4d 100644
--- a/content/security/json/CVE-2025-66200.json
+++ b/content/security/json/CVE-2025-66200.json
@@ -8,7 +8,7 @@
"vendor": "Apache Software Foundation",
"versions": [
{
- "lessThanOrEqual": "2..4.65",
+ "lessThanOrEqual": "2.4.65",
"status": "affected",
"version": "2.4.7",
"versionType": "semver"
@@ -30,11 +30,10 @@
{
"base64": false,
"type": "text/html",
- "value": "<p>mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.</p><p>This issue affects Apache HTTP Server: from 2.4.7 through 2..4.65.</p><p>Users are recommended to upgrade to version 2.4.65, which fixes the issue.</p>"
+ "value": "<p>mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.</p><p>This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.</p><p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p>"
}
],
- "value": "mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.\n\nThis issue affects Apache HTTP Server: from 2.4.7 through 2..4.65.\n\nUsers are recommended to upgrade to version 2.4.65, which fixes the issue."
- }
+ "value": "mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.\n\nThis issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue."
],
"metrics": [
{