Skip to content
OpenAdvisories

Package · Debian

mod-wsgi

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2022-2255

    Incorrect header handling in mod-wsgi

    A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

    mod-wsgi mod-wsgi mod-wsgi Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-0242 Public exploit

    mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive inf…

    mod_wsgi mod_wsgi mod-wsgi Debian
  • Unscored —
    CVE-2014-8583

    mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges …

    mod-wsgi mod-wsgi Debian Ubuntu
  • Unscored —
    CVE-2014-0240

    The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned b…

    mod-wsgi mod-wsgi Debian Ubuntu