UpHeron
All vulnerabilities

Servers and applications

CVE-2013-2249

mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.

Severity
High 7.5
Published
23 Jul 2013
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.4.1 up to 2.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2249
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2249