You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by co...@apache.org on 2024/07/01 19:21:43 UTC
(httpd-site) branch main updated: addhandler
This is an automated email from the ASF dual-hosted git repository.
covener pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/httpd-site.git
The following commit(s) were added to refs/heads/main by this push:
new 930a4f3 addhandler
930a4f3 is described below
commit 930a4f3dba5c3e1705eb176964141a5393fcafc0
Author: Eric Covener <ec...@us.ibm.com>
AuthorDate: Mon Jul 1 15:21:37 2024 -0400
addhandler
---
content/security/json/CVE-2024-38476.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/content/security/json/CVE-2024-38476.json b/content/security/json/CVE-2024-38476.json
index a800074..452b111 100644
--- a/content/security/json/CVE-2024-38476.json
+++ b/content/security/json/CVE-2024-38476.json
@@ -30,7 +30,7 @@
{
"base64": false,
"type": "text/html",
- "value": "Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via <span style=\"background-color: rgb(255, 255, 255);\">backend applications whose response headers are malicious or exploitable.</span><br><br>Note: Some legacy uses of the 'AddType' directive to connect a request to a handler must be ported to 'SetHandler' after this fix.<br><br>Users are recommended to [...]
+ "value": "Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via <span style=\"background-color: rgb(255, 255, 255);\">backend applications whose response headers are malicious or exploitable.</span><br><br>Note: Some legacy uses of the 'AddType' directive to connect a request to a handler must be ported to 'AddHandler' after this fix.<br><br>Users are recommended to [...]
}
],
"value": "Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.\n\nNote: Some legacy uses of the 'AddType' directive to connect a request to a handler must be ported to 'SetHandler' after this fix.\n\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue."