Description

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

Remediation

References

CVE-2020-1934

Related Vulnerabilities

WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (4.6.12)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28982)

Oracle JRE CVE-2022-21291 Vulnerability (CVE-2022-21291)

Piwigo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2012-2208)

Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-22721)

Severity

Medium

Classification

CVE-2020-1934 CWE-908 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities