CVE-2012-2687

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP…

published August 22, 2012

CVSS

—

EPSS

23%

Percentile

97.7

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.22515 · 97.7th percentile
Published: 2012-08-22T19:00Z

EPSS history

Timeline

22 AUG 19:00Z
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP…
cvelistv5