PatchTheCVErc-httpd vulnerabilities and fixes
Recent CVEs affecting rc-httpd, with upgrade or downgrade steps. 1 tracked.
Also searched as: rc httpd.
rc-httpd has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-03. Highest priority: CVE-2022-28380 (score 50/100).
- CVE-2022-28380 HIGH 7.5 UPGRADE The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-s
FAQ
How do I fix rc-httpd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rc-httpd being exploited right now?
None of the tracked rc-httpd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rc-httpd CVE should I patch first?
CVE-2022-28380 currently ranks highest (50/100): The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-s.