CVE-2023-25690

Kenndaten

  • CVE.org (extern): Record bei CVE.org oeffnen
  • CVSS (CVE.org): 9.8
  • EPSS (FIRST): Score —, Perzentil —
  • EPSS-Stand: —
  • Veroeffentlicht (CVE.org): 2023-03-07
  • Zuletzt angereichert: 2026-10-15 12:54 UTC
  • Externe Referenzen (Anzahl): 0
  • Anreicherungs-Plugins (Referenzen): —
  • CVSS (Quelle / verkn. Eintraege): 9.8 — Werte aus Feed-Eintraegen; CVSS (CVE.org) kommt aus Anreicherung cve_org.

Eintraege mit Bezug zu CVE-2023-25690

Veroeffentlicht Quelle Titel Severity Kategorie
2026-10-12 08:29

cert_bund

[UPDATE] [hoch] Xerox FreeFlow Print Server: Mehrere Schwachstellen

 HIGH government_cert
2026-09-11 11:06

cert_bund

[UPDATE] [hoch] Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting

 CRITICAL government_cert
2026-08-12 07:51

cert_bund

[UPDATE] [hoch] Dell ECS: Mehrere Schwachstellen

 HIGH government_cert
2023-03-07 00:00

apache_httpd_sec

CVE-2023-25690: Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. For example, something like: RewriteEngine on RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P] ProxyPassReverse /here/ http://example.com:8080/ Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning.

 CRITICAL vendor_advisory
Alle CVEs