Threats tagged 'ghsa-2mcx-3xj5-wg86'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.4	EPSS 0.6%	CVE-2025-49812In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack High7.4EPSS 0.6%2025-07-10GCVE DatabaseCVE-2025-49812 An HTTP desynchronisation vulnerability exists in some mod_ssl configurations of Apache HTTP Server versions up to 2.4.63. This issue affects configurations using "SSLEngine optional" to enable TLS upgrades, allowing a man-in-the-middle attacker to hijack HTTP sessions via a TLS upgrade. The vulnerability is resolved by upgrading to Apache HTTP Server version 2.4.64, which removes support for TLS upgrade. EPSS 0.6%Report on CVE-2025-49812 Vulnerability CWE-287 #ghsa-2mcx-3xj5-wg86	GCVE Database	2025-07-10

Page 1 of 1