Description

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

Remediation

References

CVE-2013-5704

Related Vulnerabilities

Joomla! Core Security Bypass (2.5.0 - 3.9.16)

Moodle CVE-2023-5551 Vulnerability (CVE-2023-5551)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.6)

MySQL CVE-2023-21880 Vulnerability (CVE-2023-21880)

WordPress Plugin Product Addons & Fields for WooCommerce Arbitrary File Upload (1.1)

Severity

Medium

Classification

CVE-2013-5704

Tags

Missing Update Known Vulnerabilities