CVE-2009-0796: apache mod_perl

Modified

AliasesDEBIAN-CVE-2009-0796

Published 07-04-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-0796 is a low (CVSS 2.6) vulnerability in apache mod_perl. EPSS estimates a 29.64% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 09-11-2009)

Source freshness unavailable

How is this decided?

CVSS score

2.6/10

010

Low · v2.0 (NVD)

EPSS score

29.64%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3reference, exploit-database

Timeline

07-04-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.

CVSS metrics

1 score · 1 source · 1 version

v2.02.6

EPSS trend

Probability

29.64%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

No change 0.00 pp

From 29.64% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

referenceUnverified
Exploit Reference (gossamer-threads.com)
Maturity: unknown
referenceUnverified
Exploit Reference (gossamer-threads.com)
Maturity: unknown
exploit-databaseremotemultipleVerified
Apache mod_perl - 'Apache::Status' / 'Apache2::Status' Cross-Site Scripting
Maturity: weaponized