Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
CVE-2022-2583: Apache HTTP Server Incorrectly Routes HTTP Requests
CVE-2022-2583 · published 3 years ago
Summary
A flaw in the Apache HTTP Server can cause the server to incorrectly route HTTP requests, potentially allowing attackers to access unauthorized areas of the site. This could lead to sensitive data being exposed or unauthorized actions being taken. Apache HTTP Server administrators should upgrade to a patched version to prevent this issue.
What to do
- Update github.com ntbosscher to version 0.7.2.
- Update gobase_project gobase to version 0.7.2 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| go | github.com | ntbosscher |
< 0.7.2 Fix: upgrade to 0.7.2
|
| – | gobase_project | gobase |
< 0.7.2 cpe:2.3:a:gobase_project:gobase:*:*:*:*:*:go:*:* |
Original advisory text
A race condition can cause incorrect HTTP request routing.
A race condition can cause incorrect HTTP request routing.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-362Race Condition
Timeline
Published27 Dec 2022
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta