VULNERABILITY INTELLIGENCE

CVE-2013-0966

CVSS score6.4 NONE
EPSS probability1.70%
CISA KEVNot currently listed
Published2013-03-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references