Cross-site scripting (XSS) vulnerability in Apache 2.2.6...
Moderate severity
Unreviewed
Published
May 1, 2022
to the GitHub Advisory Database
•
Updated Jan 31, 2023
Description
Published by the National Vulnerability Database
May 13, 2008
Published to the GitHub Advisory Database
May 1, 2022
Last updated
Jan 31, 2023
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
References