https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:49:13 +0000 https://vulnerability.circl.lu/vuln/cve-2018-1283 <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server</p> <p>In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a &#34;Session&#34; header. This comes from the &#34;HTTP_SESSION&#34; variable name used by mod_session to forward its data to CGIs, since the prefix &#34;HTTP_&#34; is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server</p> <p>In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a &#34;Session&#34; header. This comes from the &#34;HTTP_SESSION&#34; variable name used by mod_session to forward its data to CGIs, since the prefix &#34;HTTP_&#34; is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.</p> https://vulnerability.circl.lu/vuln/cve-2018-1283