mod_proxy_cluster vulnerabilities
CVEs whose affected-version data names the mod_proxy_cluster package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-10306Medium· 5.4A vulnerability was found in mod_proxy_cluster
A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This mean…
▾ SunlitRed Hat · mod_proxy_clusterEPSS 0.38%via NVD
CVE-2023-6710Medium· 5.4PoCA flaw was found in the mod_proxy_cluster in the Apache server
A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script …
▾ Twilightmodcluster · mod_proxy_clusterEPSS 2.2%via NVD