CVE-2009-2823

Published Nov 10, 2009 CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Description
The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-2813 The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.
History

No history.

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:07 AM
Reserved
Aug 17, 2009, 12:00 AM
Status
Modified
Published
Nov 10, 2009, 7:30 PM
Modified
Jun 16, 2026, 11:10 PM