{"action":"Upgrade libapache2-mod-perl2 to 2.0.4-6 or later.","affected":[{"fixed":"2.0.4-6","introduced":"0"}],"component":"libapache2-mod-perl2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.0.4-6"],"id":"tcs_01M5N98APRQWSQXKENAG566H3S","modified_at":"2026-10-23T17:47:23.379506031Z","published_at":"2009-04-07T23:30:00.233Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2009-0796","https://security-tracker.debian.org/tracker/CVE-2009-0796"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2009-0796#Debian:14/libapache2-mod-perl2","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2009-0796"}],"summary":"Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attack"}