CVEs-PoC/2020/CVE-2020-11984.md

CVE-2020-11984

Description

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

POC

Reference

• http://packetstormsecurity.com/files/159009/Apache2-mod_proxy_uwsgi-Incorrect-Request-Handling.html
• https://www.oracle.com/security-alerts/cpujan2021.html
• https://www.oracle.com/security-alerts/cpuoct2020.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Solhack/Team_CSI_platform
• https://github.com/Totes5706/TotesHTB
• https://github.com/jmetzger/training-linux-security
• https://github.com/jmetzger/training-linux-sicherheit-und-haertung
• https://github.com/mesaglio/tools-exec
• https://github.com/mykter/prisma-cloud-pipeline
• https://github.com/vshaliii/Vegeta1-Vulhub-Walkthrough