Search: CVE-2025-58098

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 1.4%	CVE-2025-58098Apache HTTP Server · Insertion of Sensitive Information Into Sent Data High8.3EPSS 1.4%2025-12-05CVE Database V5CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. EPSS 1.4%Vulnerability Apache Software Foundation CWE-201	CVE Database V5	2025-12-05

Page 1 of 1 · 1 duplicate CVE record merged