Summary
mod_jk
[1.2.49-1]
- Related: RHEL-27511 - Rebase to upstream 1.2.49 release
mod_proxy_cluster
[1.3.20-1]
- Rebase mod_cluster to upstream 1.3.20.Final tag
- Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | mod_jk | 0:1.2.49-1.el9_4 |
| Oracle Linux · 9 | mod_proxy_cluster | 0:1.3.20-1.el9_4 |
Vulnerabilities 2
-
High 7.5
Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request
Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possibl…
-
Medium 5.4CVE-2023-6710 Public exploit
Mod_cluster/mod_proxy_cluster: stored cross site scripting
A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter…