CLSA-2026-1781623309
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781623309.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1781623309
- Upstream
CVE (2)
- CVE-2026-29170
- CVE-2026-42535
- Published
- 2026-06-22T14:44:40Z
- Modified
- 2026-10-26T09:31:39Z
- Summary
- httpd: Fix of 2 CVEs
- Details
-
- CVE-2026-29170: mod_proxy_ftp: XSS in generated HTML directory listing; escape entry names with ap_escape_html(ap_os_escape_path()) instead of ap_escape_uri() in href attributes
- CVE-2026-42535: mod_dav_fs: deny WebDAV access to or within the DAV_FS_STATE_DIR state directory to prevent manipulation of trusted property databases
- References
Affected packages
TuxCare:CentOS:6 / httpd
Package
- Name
- httpd
- Purl
- pkg:rpm/tuxcare/httpd?distro=centos-6
TuxCare:CentOS:6 / httpd-devel
Package
- Name
- httpd-devel
- Purl
- pkg:rpm/tuxcare/httpd-devel?distro=centos-6
TuxCare:CentOS:6 / httpd-manual
Package
- Name
- httpd-manual
- Purl
- pkg:rpm/tuxcare/httpd-manual?distro=centos-6
TuxCare:CentOS:6 / httpd-tools
Package
- Name
- httpd-tools
- Purl
- pkg:rpm/tuxcare/httpd-tools?distro=centos-6