ubuntu · CVE-2012-4558

Quick triage

Priority: medium Published: 2013-02-26 00:00:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-4558 medium priority: Ubuntu including 1 source packages (apache2), 6 status rows across 6 suites (hardy, lucid, oneiric, precise, quantal, upstream): released 6.

Description:

Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string.

cvelogic Threat Intelligence