Description

mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.

Remediation

References

CVE-2013-1862

Related Vulnerabilities

WordPress Plugin BetterDocs-Best Documentation & Knowledge Base Cross-Site Scripting (1.9.1)

Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.11)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42117)

WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.5)

WordPress Plugin Woocommerce CSV importer Unspecified Vulnerability (3.4.0)

Severity

Medium

Classification

CVE-2013-1862

Tags

Missing Update Known Vulnerabilities