Debian/apache2: medium 6.1

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitr

Action: Upgrade apache2 to 2.2.6-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-4465
• https://security-tracker.debian.org/tracker/CVE-2007-4465

published 2007-09-14T00:17:00Z · modified 2026-10-21T18:00:54.291081837Z · JSON