Apache Mod_AutoIndex.C Undefined Charset Cross-Site Scripting Vulnerability

Apache is affected by a vulnerability that may cause certain web pages to be prone to a cross-site scripting attack. This issue stems from a lack of a defined charset on certain generated pages.

Web pages generated by the affected source code may be prone to a cross-site scripting issue.

Versions prior to Apache 2.2.6 are affected.

NOTE: Reports indicate that this issue does not occur when the application is running on Windows operating systems.


 

Privacy Statement
Copyright 2010, SecurityFocus