Modwsgi - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2022-08-25.

Products

• Mod Wsgi - 4 CVEs

Newest CVEs of Modwsgi

• CVE-2022-2255 - CVSS 7.5 (high), 2022-08-25: A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the…
• CVE-2014-0242 - CVSS 7.5 (high), 2019-12-09: mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header…
• CVE-2014-8583 - CVSS 6.9 (medium), 2014-12-16: mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow…
• CVE-2014-0240 - CVSS 6.2 (medium), 2014-05-27: The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux…