TI-2022-02080 CVE-2022-2255 · GHSA-7527-8855-9cf8
Insufficient verification of data authenticity in mod_wsgi
Priority LOW 35
A vulnerability was found in mod_wsgi.
Vulnerabilities
4 records
TI-2014-00234 CVE-2014-0242 · GHSA-jf6g-4gpq-f62c
Information disclosure in mod_wsgi
Priority MEDIUM 44
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then…
TI-2014-07048 CVE-2014-8583 · GHSA-6mwv-34hq-6gqx
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly…
Priority LOW 31
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
TI-2014-00232 CVE-2014-0240 · GHSA-p3r2-mvh7-9pcc
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly…
Priority LOW 28
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors r…