VulnerableCode Advisory Details - CVE-2022-31813

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: apache_httpd / CVE-2022-31813

Essentials
Severities (1)
References (1)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	apache_httpd/CVE-2022-31813
Aliases
Summary	Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (1)

CWE-348

Use of Less Trusted Source

System	Score	Found at
apache_httpd	low

Reference id	Reference type	URL
CVE-2022-31813		https://httpd.apache.org/security/json/CVE-2022-31813.json

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.