Description
The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Google Maps Cross-Site Scripting (7.11.34)
WordPress Plugin WP Pipes Unspecified Vulnerability (1.28)
Drupal Core 8.8.x Cross-Site Request Forgery (8.8.0 - 8.8.7)
WordPress Plugin Audio Player Cross-Site Scripting (2.0.4.5)
Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3733)