Read the docs
TI-2011-01913 Aliases CVE-2011-2191GHSA-mfhm-xfg5-jwjm

Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before…

Priority LOW 33CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Tampering
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply.

Why it matters now

EPSS 0.01398 72nd percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 137

CPEVersionsRoleVendor
cpe:2.3:a:cherokee-project:cherokee:*:*:*:*:*:*:*:*up to 1.2.98VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.3.0:*:*:*:*:*:*:*0.3.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.0:*:*:*:*:*:*:*0.4.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.1:*:*:*:*:*:*:*0.4.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.2:*:*:*:*:*:*:*0.4.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.3:*:*:*:*:*:*:*0.4.3VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.4:*:*:*:*:*:*:*0.4.4VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.5:*:*:*:*:*:*:*0.4.5VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.6:*:*:*:*:*:*:*0.4.6VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.7:*:*:*:*:*:*:*0.4.7VulnerableCherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:*:*:*:*:*:*:*:* Versions up to 1.2.98 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.3.0:*:*:*:*:*:*:* Versions 0.3.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.5:*:*:*:*:*:*:* Versions 0.4.5 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.6:*:*:*:*:*:*:* Versions 0.4.6 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.7:*:*:*:*:*:*:* Versions 0.4.7 Vulnerable ·Cherokee-project
Show 127 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cherokee-project:cherokee:0.4.8:*:*:*:*:*:*:*0.4.8VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.9:*:*:*:*:*:*:*0.4.9VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.10:*:*:*:*:*:*:*0.4.10VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.11:*:*:*:*:*:*:*0.4.11VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.12:*:*:*:*:*:*:*0.4.12VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.13:*:*:*:*:*:*:*0.4.13VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.14:*:*:*:*:*:*:*0.4.14VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.15:*:*:*:*:*:*:*0.4.15VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.16:*:*:*:*:*:*:*0.4.16VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.17:*:*:*:*:*:*:*0.4.17VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.18:*:*:*:*:*:*:*0.4.18VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.19:*:*:*:*:*:*:*0.4.19VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.20:*:*:*:*:*:*:*0.4.20VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.21:*:*:*:*:*:*:*0.4.21VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.22:*:*:*:*:*:*:*0.4.22VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.23:*:*:*:*:*:*:*0.4.23VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.24:*:*:*:*:*:*:*0.4.24VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.25:*:*:*:*:*:*:*0.4.25VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.26:*:*:*:*:*:*:*0.4.26VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.27:*:*:*:*:*:*:*0.4.27VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.28:*:*:*:*:*:*:*0.4.28VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.29:*:*:*:*:*:*:*0.4.29VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.4.30:*:*:*:*:*:*:*0.4.30VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.0:*:*:*:*:*:*:*0.5.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.1:*:*:*:*:*:*:*0.5.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.2:*:*:*:*:*:*:*0.5.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.3:*:*:*:*:*:*:*0.5.3VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.4:*:*:*:*:*:*:*0.5.4VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.5:*:*:*:*:*:*:*0.5.5VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.5.6:*:*:*:*:*:*:*0.5.6VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.6.0:*:*:*:*:*:*:*0.6.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.6.1:*:*:*:*:*:*:*0.6.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.7.0:*:*:*:*:*:*:*0.7.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.7.2:*:*:*:*:*:*:*0.7.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.8.0:*:*:*:*:*:*:*0.8.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.8.1:*:*:*:*:*:*:*0.8.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.9.0:*:*:*:*:*:*:*0.9.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.9.1:*:*:*:*:*:*:*0.9.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.9.2:*:*:*:*:*:*:*0.9.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.9.3:*:*:*:*:*:*:*0.9.3VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.9.4:*:*:*:*:*:*:*0.9.4VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.10.0:*:*:*:*:*:*:*0.10.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.10.1:*:*:*:*:*:*:*0.10.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.0:*:*:*:*:*:*:*0.11.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.1:*:*:*:*:*:*:*0.11.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.2:*:*:*:*:*:*:*0.11.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.3:*:*:*:*:*:*:*0.11.3VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.4:*:*:*:*:*:*:*0.11.4VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.5:*:*:*:*:*:*:*0.11.5VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.11.6:*:*:*:*:*:*:*0.11.6VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.98.0:*:*:*:*:*:*:*0.98.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.98.1:*:*:*:*:*:*:*0.98.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.0:*:*:*:*:*:*:*0.99.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.1:*:*:*:*:*:*:*0.99.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.2:*:*:*:*:*:*:*0.99.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.3:*:*:*:*:*:*:*0.99.3VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.4:*:*:*:*:*:*:*0.99.4VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.5:*:*:*:*:*:*:*0.99.5VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.6:*:*:*:*:*:*:*0.99.6VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.07:*:*:*:*:*:*:*0.99.07VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.8:*:*:*:*:*:*:*0.99.8VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.9:*:*:*:*:*:*:*0.99.9VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.10:*:*:*:*:*:*:*0.99.10VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.11:*:*:*:*:*:*:*0.99.11VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.12:*:*:*:*:*:*:*0.99.12VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.13:*:*:*:*:*:*:*0.99.13VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.14:*:*:*:*:*:*:*0.99.14VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.15:*:*:*:*:*:*:*0.99.15VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.16:*:*:*:*:*:*:*0.99.16VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.17:*:*:*:*:*:*:*0.99.17VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.18:*:*:*:*:*:*:*0.99.18VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.19:*:*:*:*:*:*:*0.99.19VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.20:*:*:*:*:*:*:*0.99.20VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.21:*:*:*:*:*:*:*0.99.21VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.22:*:*:*:*:*:*:*0.99.22VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.23:*:*:*:*:*:*:*0.99.23VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.24:*:*:*:*:*:*:*0.99.24VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.25:*:*:*:*:*:*:*0.99.25VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.26:*:*:*:*:*:*:*0.99.26VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.27:*:*:*:*:*:*:*0.99.27VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.28:*:*:*:*:*:*:*0.99.28VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.29:*:*:*:*:*:*:*0.99.29VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.30:*:*:*:*:*:*:*0.99.30VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.31:*:*:*:*:*:*:*0.99.31VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.32:*:*:*:*:*:*:*0.99.32VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.33:*:*:*:*:*:*:*0.99.33VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.34:*:*:*:*:*:*:*0.99.34VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.35:*:*:*:*:*:*:*0.99.35VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.36:*:*:*:*:*:*:*0.99.36VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.37:*:*:*:*:*:*:*0.99.37VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.38:*:*:*:*:*:*:*0.99.38VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.39:*:*:*:*:*:*:*0.99.39VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.40:*:*:*:*:*:*:*0.99.40VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.41:*:*:*:*:*:*:*0.99.41VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.42:*:*:*:*:*:*:*0.99.42VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.43:*:*:*:*:*:*:*0.99.43VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.44:*:*:*:*:*:*:*0.99.44VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.45:*:*:*:*:*:*:*0.99.45VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.46:*:*:*:*:*:*:*0.99.46VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.47:*:*:*:*:*:*:*0.99.47VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.48:*:*:*:*:*:*:*0.99.48VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:0.99.49:*:*:*:*:*:*:*0.99.49VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.8:*:*:*:*:*:*:*1.0.8VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.9:*:*:*:*:*:*:*1.0.9VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.10:*:*:*:*:*:*:*1.0.10VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.11:*:*:*:*:*:*:*1.0.11VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.12:*:*:*:*:*:*:*1.0.12VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.13:*:*:*:*:*:*:*1.0.13VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.14:*:*:*:*:*:*:*1.0.14VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.15:*:*:*:*:*:*:*1.0.15VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.16:*:*:*:*:*:*:*1.0.16VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.17:*:*:*:*:*:*:*1.0.17VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.18:*:*:*:*:*:*:*1.0.18VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.19:*:*:*:*:*:*:*1.0.19VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.0.20:*:*:*:*:*:*:*1.0.20VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableCherokee-project
cpe:2.3:a:cherokee-project:cherokee:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableCherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.8:*:*:*:*:*:*:* Versions 0.4.8 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.10:*:*:*:*:*:*:* Versions 0.4.10 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.11:*:*:*:*:*:*:* Versions 0.4.11 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.12:*:*:*:*:*:*:* Versions 0.4.12 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.13:*:*:*:*:*:*:* Versions 0.4.13 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.14:*:*:*:*:*:*:* Versions 0.4.14 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.15:*:*:*:*:*:*:* Versions 0.4.15 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.16:*:*:*:*:*:*:* Versions 0.4.16 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.17:*:*:*:*:*:*:* Versions 0.4.17 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.18:*:*:*:*:*:*:* Versions 0.4.18 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.19:*:*:*:*:*:*:* Versions 0.4.19 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.20:*:*:*:*:*:*:* Versions 0.4.20 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.21:*:*:*:*:*:*:* Versions 0.4.21 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.22:*:*:*:*:*:*:* Versions 0.4.22 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.23:*:*:*:*:*:*:* Versions 0.4.23 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.24:*:*:*:*:*:*:* Versions 0.4.24 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.25:*:*:*:*:*:*:* Versions 0.4.25 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.26:*:*:*:*:*:*:* Versions 0.4.26 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.27:*:*:*:*:*:*:* Versions 0.4.27 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.28:*:*:*:*:*:*:* Versions 0.4.28 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.29:*:*:*:*:*:*:* Versions 0.4.29 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.4.30:*:*:*:*:*:*:* Versions 0.4.30 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.1:*:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.2:*:*:*:*:*:*:* Versions 0.5.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.3:*:*:*:*:*:*:* Versions 0.5.3 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.4:*:*:*:*:*:*:* Versions 0.5.4 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.5:*:*:*:*:*:*:* Versions 0.5.5 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.5.6:*:*:*:*:*:*:* Versions 0.5.6 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.9.1:*:*:*:*:*:*:* Versions 0.9.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.9.2:*:*:*:*:*:*:* Versions 0.9.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.9.3:*:*:*:*:*:*:* Versions 0.9.3 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.9.4:*:*:*:*:*:*:* Versions 0.9.4 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.10.1:*:*:*:*:*:*:* Versions 0.10.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.0:*:*:*:*:*:*:* Versions 0.11.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.1:*:*:*:*:*:*:* Versions 0.11.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.2:*:*:*:*:*:*:* Versions 0.11.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.3:*:*:*:*:*:*:* Versions 0.11.3 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.4:*:*:*:*:*:*:* Versions 0.11.4 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.5:*:*:*:*:*:*:* Versions 0.11.5 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.11.6:*:*:*:*:*:*:* Versions 0.11.6 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.98.0:*:*:*:*:*:*:* Versions 0.98.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.98.1:*:*:*:*:*:*:* Versions 0.98.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.0:*:*:*:*:*:*:* Versions 0.99.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.1:*:*:*:*:*:*:* Versions 0.99.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.2:*:*:*:*:*:*:* Versions 0.99.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.3:*:*:*:*:*:*:* Versions 0.99.3 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.4:*:*:*:*:*:*:* Versions 0.99.4 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.5:*:*:*:*:*:*:* Versions 0.99.5 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.6:*:*:*:*:*:*:* Versions 0.99.6 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.07:*:*:*:*:*:*:* Versions 0.99.07 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.8:*:*:*:*:*:*:* Versions 0.99.8 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.9:*:*:*:*:*:*:* Versions 0.99.9 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.10:*:*:*:*:*:*:* Versions 0.99.10 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.11:*:*:*:*:*:*:* Versions 0.99.11 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.12:*:*:*:*:*:*:* Versions 0.99.12 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.13:*:*:*:*:*:*:* Versions 0.99.13 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.14:*:*:*:*:*:*:* Versions 0.99.14 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.15:*:*:*:*:*:*:* Versions 0.99.15 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.16:*:*:*:*:*:*:* Versions 0.99.16 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.17:*:*:*:*:*:*:* Versions 0.99.17 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.18:*:*:*:*:*:*:* Versions 0.99.18 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.19:*:*:*:*:*:*:* Versions 0.99.19 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.20:*:*:*:*:*:*:* Versions 0.99.20 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.21:*:*:*:*:*:*:* Versions 0.99.21 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.22:*:*:*:*:*:*:* Versions 0.99.22 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.23:*:*:*:*:*:*:* Versions 0.99.23 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.24:*:*:*:*:*:*:* Versions 0.99.24 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.25:*:*:*:*:*:*:* Versions 0.99.25 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.26:*:*:*:*:*:*:* Versions 0.99.26 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.27:*:*:*:*:*:*:* Versions 0.99.27 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.28:*:*:*:*:*:*:* Versions 0.99.28 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.29:*:*:*:*:*:*:* Versions 0.99.29 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.30:*:*:*:*:*:*:* Versions 0.99.30 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.31:*:*:*:*:*:*:* Versions 0.99.31 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.32:*:*:*:*:*:*:* Versions 0.99.32 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.33:*:*:*:*:*:*:* Versions 0.99.33 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.34:*:*:*:*:*:*:* Versions 0.99.34 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.35:*:*:*:*:*:*:* Versions 0.99.35 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.36:*:*:*:*:*:*:* Versions 0.99.36 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.37:*:*:*:*:*:*:* Versions 0.99.37 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.38:*:*:*:*:*:*:* Versions 0.99.38 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.39:*:*:*:*:*:*:* Versions 0.99.39 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.40:*:*:*:*:*:*:* Versions 0.99.40 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.41:*:*:*:*:*:*:* Versions 0.99.41 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.42:*:*:*:*:*:*:* Versions 0.99.42 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.43:*:*:*:*:*:*:* Versions 0.99.43 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.44:*:*:*:*:*:*:* Versions 0.99.44 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.45:*:*:*:*:*:*:* Versions 0.99.45 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.46:*:*:*:*:*:*:* Versions 0.99.46 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.47:*:*:*:*:*:*:* Versions 0.99.47 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.48:*:*:*:*:*:*:* Versions 0.99.48 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:0.99.49:*:*:*:*:*:*:* Versions 0.99.49 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Cherokee-project
  • cpe:2.3:a:cherokee-project:cherokee:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Cherokee-project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-2191
  2. 2026-10-03 Alias added: GHSA-mfhm-xfg5-jwjm

References

Exploit 4

Patch 1

Advisory 1

Other 3

  • TI-2019-15018 In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in… CVSS 3.1CRITICAL 9.8
  • TI-2019-15016 An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. CVSS 3.1HIGH 8.4
  • TI-2020-10210 Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer… CVSS 3.1HIGH 7.5
  • TI-2019-15017 In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote… CVSS 3.1HIGH 7.5
  • TI-2014-03847 The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and… CVSS 2.0MEDIUM 6.8
  • TI-2009-04250 header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing… CVSS 2.0MEDIUM 5.0
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences