Debian/apache2: unknown

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows re

Action: Upgrade apache2 to 2.2.8-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-6388#Debian:13/apache2
• https://security-tracker.debian.org/tracker/CVE-2007-6388

published 2008-01-08T18:46:00Z · modified 2026-10-21T17:47:49.153085554Z · JSON