Cross-Site Scripting Vulnerability in Apache HTTP Server's mod_perl

CVE-2009-0796

Summary

A cross-site scripting vulnerability exists in the Apache::Status and Apache2::Status modules associated with mod_perl for the Apache HTTP Server. When the /perl-status endpoint is accessible, it permits remote attackers to inject arbitrary web scripts or HTML content through crafted URIs. This can lead to unauthorized actions performed on behalf of users, making it essential for administrators to restrict access to this endpoint and apply necessary patches to mitigate potential exploitation risks.

References