CLSA-2026-1778858907
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778858907.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1778858907
- Upstream
- Published
- 2026-05-15T15:28:32Z
- Modified
- 2026-06-01T00:32:31Z
- Summary
- mod_proxy_cluster: Fix of 2 CVEs
- Details
-
- CVE-2023-6710: stored XSS in mod_cluster-manager HTML output via virtual host and context names rendered without HTML escaping
- CVE-2024-10306: unauthorized MCMP requests due to directive being ignored for protocol-handler filtering; runtime guard now refuses siblings of EnableMCPMReceive, and the shipped conf.sample uses
- References