Debian/libapache-mod-jk: unknown

mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protect

Action: Upgrade libapache-mod-jk to 1:1.2.23-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1860
• https://security-tracker.debian.org/tracker/CVE-2007-1860

published 2007-05-25T18:30:00Z · modified 2026-10-21T17:47:47.866674901Z · JSON