CVE-2019-10092

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page

published September 26, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
81%
Percentile
99.6
In the wild
Unconfirmed
What it is

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.81466 · 99.6th percentile
Published
2019-09-26T14:07Z
EPSS history
Timeline
  • 26 SEP 14:07Z
    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page
    cvelistv5