CVE-2023-6710 – Mod_cluster/mod_proxy_cluster: stored cross site scripting

https://notcve.org/view.php?id=CVE-2023-6710

12 Dec 2023 — A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page. Se encontró una falla en mod_proxy_cluster en el servidor Apache. Este problema puede permitir que un usuario malintencionado agregue un script en el parámetro 'ali... • https://packetstorm.news/files/id/178561 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •