Every CVE Search/ Get API key

CVE-2022-2255

Incorrect header handling in mod-wsgi

7.5 HighFix available

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.94%Unchanged since Aug 26, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
CVE-2022-2255
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-348, CWE-345
Updated
2026-11-02
CVE List No score

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
CVE-2022-2255
Weakness
CWE-348
Updated
2026-11-02
EUVDEUVD-2022-0159 No score

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
EUVD-2022-0159
Updated
2026-11-03
GitHub AdvisoriesGHSA-7527-8855-9cf8 8.7

Incorrect header handling in mod-wsgi

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
GHSA-7527-8855-9cf8
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
OSVAZL-10734 7.5

CVE-2022-2255 affecting package mod_wsgi for versions less than 4.9.3-2

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
AZL-10734
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2022-2255 7.5

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
DEBIAN-CVE-2022-2255
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
Show 15 moreShow less
OSVGHSA-7527-8855-9cf8 8.7

Incorrect header handling in mod-wsgi

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
GHSA-7527-8855-9cf8
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
OSVOESA-2022-1827 5.6

mod_wsgi security update

The mod_wsgi adapter is an Apache module that provides a WSGI compliant interface for hosting Python based web applications within Apache. The adapter is written completely in C code against the Apache C runtime andfor hosting WSGI applications within Apache has a lower overhead than using existing WSGI adapters for mod_python or CGI.

Security Fix(es):

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy (trusted proxies are configured via the WSGITrustedProxies directive) allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

References: https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941 https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082(CVE-2022-2255)

Record
OESA-2022-1827
CVSS 3.1
5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:4791 7.3

Red Hat Security Advisory: python39:3.9 security update

Record
RHSA-2025:4791
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2025:4791 7.3

Moderate: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:4791
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2022-2255 7.5

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
UBUNTU-CVE-2022-2255
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2025:4791 No score

Moderate: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:4791
Updated
2026-11-02
OSVBIT-mod_wsgi-2022-2255 No score

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
BIT-mod_wsgi-2022-2255
Updated
2026-11-02
OSV No score

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
CVE-2022-2255
Weakness
CWE-348
Updated
2026-11-02
OSVMGASA-2022-0289 No score

Updated apache-mod_wsgi packages fix security vulnerability

It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations (CVE-2022-2255).

Record
MGASA-2022-0289
Updated
2026-11-02
OSVopenSUSE-SU-2024:12535-1 No score

apache2-mod_wsgi-4.9.4-1.1 on GA media

These are all security issues fixed in the apache2-mod_wsgi-4.9.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12535-1
Updated
2026-11-02
OSVPYSEC-2022-254 No score

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Record
PYSEC-2022-254
Updated
2026-11-02
OSVSUSE-SU-2022:4010-1 No score

Security update for apache2-mod_wsgi

This update for apache2-mod_wsgi fixes the following issues:

  • CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)
Record
SUSE-SU-2022:4010-1
Updated
2026-11-02
OSVSUSE-SU-2022:4013-1 No score

Security update for apache2-mod_wsgi

This update for apache2-mod_wsgi fixes the following issues:

  • CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)
Record
SUSE-SU-2022:4013-1
Updated
2026-11-02
OSVSUSE-SU-2022:4488-1 No score

Security update for apache2-mod_wsgi

This update for apache2-mod_wsgi fixes the following issues:

  • CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)
Record
SUSE-SU-2022:4488-1
Updated
2026-11-02
OSVUSN-5551-1 No score

mod-wsgi vulnerability

It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations.

Record
USN-5551-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mod-wsgi
PyPI
before 4.9.3
4.9.3
python39
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-PyMySQL
AlmaLinux:8
before 0.10.1-2.module_el8.6.0+2780+a40f65e1
0.10.1-2.module_el8.6.0+2780+a40f65e1
python39-cffi
AlmaLinux:8
before 1.14.3-2.module_el8.6.0+2780+a40f65e1
1.14.3-2.module_el8.6.0+2780+a40f65e1
python39-cffi
AlmaLinux:8
before 1.14.3-2.module_el8.6.0+3248+c431e88c
1.14.3-2.module_el8.6.0+3248+c431e88c
python39-chardet
AlmaLinux:8
before 3.0.4-19.module_el8.6.0+2780+a40f65e1
3.0.4-19.module_el8.6.0+2780+a40f65e1
python39-cryptography
AlmaLinux:8
before 3.3.1-3.module_el8.10.0+3765+2f9a457d
3.3.1-3.module_el8.10.0+3765+2f9a457d
python39-devel
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-idle
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-idna
AlmaLinux:8
before 2.10-4.module_el8.10.0+3849+a48d89aa
2.10-4.module_el8.10.0+3849+a48d89aa
Show 190 moreShow less
Affected packages
PackageAffectedFixed
python39-libs
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-lxml
AlmaLinux:8
before 4.6.5-1.module_el8.6.0+2780+a40f65e1
4.6.5-1.module_el8.6.0+2780+a40f65e1
python39-lxml
AlmaLinux:8
before 4.6.5-1.module_el8.6.0+3248+c431e88c
4.6.5-1.module_el8.6.0+3248+c431e88c
python39-mod_wsgi
AlmaLinux:8
before 4.7.1-7.module_el8.10.0+3989+a618fe15.1
4.7.1-7.module_el8.10.0+3989+a618fe15.1
python39-numpy
AlmaLinux:8
before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy
AlmaLinux:8
before 1.19.4-3.module_el8.6.0+3248+c431e88c
1.19.4-3.module_el8.6.0+3248+c431e88c
python39-numpy-doc
AlmaLinux:8
before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2py
AlmaLinux:8
before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2py
AlmaLinux:8
before 1.19.4-3.module_el8.6.0+3248+c431e88c
1.19.4-3.module_el8.6.0+3248+c431e88c
python39-pip
AlmaLinux:8
before 20.2.4-9.module_el8.10.0+3765+2f9a457d
20.2.4-9.module_el8.10.0+3765+2f9a457d
python39-pip-wheel
AlmaLinux:8
before 20.2.4-9.module_el8.10.0+3765+2f9a457d
20.2.4-9.module_el8.10.0+3765+2f9a457d
python39-ply
AlmaLinux:8
before 3.11-10.module_el8.6.0+2780+a40f65e1
3.11-10.module_el8.6.0+2780+a40f65e1
python39-psutil
AlmaLinux:8
before 5.8.0-4.module_el8.6.0+2780+a40f65e1
5.8.0-4.module_el8.6.0+2780+a40f65e1
python39-psutil
AlmaLinux:8
before 5.8.0-4.module_el8.6.0+3248+c431e88c
5.8.0-4.module_el8.6.0+3248+c431e88c
python39-psycopg2
AlmaLinux:8
before 2.8.6-3.module_el8.10.0+3765+2f9a457d
2.8.6-3.module_el8.10.0+3765+2f9a457d
python39-psycopg2-doc
AlmaLinux:8
before 2.8.6-3.module_el8.10.0+3765+2f9a457d
2.8.6-3.module_el8.10.0+3765+2f9a457d
python39-psycopg2-tests
AlmaLinux:8
before 2.8.6-3.module_el8.10.0+3765+2f9a457d
2.8.6-3.module_el8.10.0+3765+2f9a457d
python39-pycparser
AlmaLinux:8
before 2.20-3.module_el8.6.0+2780+a40f65e1
2.20-3.module_el8.6.0+2780+a40f65e1
python39-pysocks
AlmaLinux:8
before 1.7.1-4.module_el8.6.0+2780+a40f65e1
1.7.1-4.module_el8.6.0+2780+a40f65e1
python39-pyyaml
AlmaLinux:8
before 5.4.1-1.module_el8.6.0+2780+a40f65e1
5.4.1-1.module_el8.6.0+2780+a40f65e1
python39-pyyaml
AlmaLinux:8
before 5.4.1-1.module_el8.6.0+3248+c431e88c
5.4.1-1.module_el8.6.0+3248+c431e88c
python39-requests
AlmaLinux:8
before 2.25.0-3.module_el8.9.0+3634+fb2a896c
2.25.0-3.module_el8.9.0+3634+fb2a896c
python39-rpm-macros
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-scipy
AlmaLinux:8
before 1.5.4-5.module_el8.9.0+3634+fb2a896c
1.5.4-5.module_el8.9.0+3634+fb2a896c
python39-setuptools
AlmaLinux:8
before 50.3.2-6.module_el8.10.0+3885+d986a391
50.3.2-6.module_el8.10.0+3885+d986a391
python39-setuptools-wheel
AlmaLinux:8
before 50.3.2-6.module_el8.10.0+3885+d986a391
50.3.2-6.module_el8.10.0+3885+d986a391
python39-six
AlmaLinux:8
before 1.15.0-3.module_el8.6.0+2780+a40f65e1
1.15.0-3.module_el8.6.0+2780+a40f65e1
python39-test
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-tkinter
AlmaLinux:8
before 3.9.20-1.module_el8.10.0+3902+1690be06
3.9.20-1.module_el8.10.0+3902+1690be06
python39-toml
AlmaLinux:8
before 0.10.1-5.module_el8.6.0+2780+a40f65e1
0.10.1-5.module_el8.6.0+2780+a40f65e1
python39-urllib3
AlmaLinux:8
before 1.25.10-5.module_el8.10.0+3765+2f9a457d
1.25.10-5.module_el8.10.0+3765+2f9a457d
python39-wheel
AlmaLinux:8
before 1:0.35.1-4.module_el8.6.0+2780+a40f65e1
1:0.35.1-4.module_el8.6.0+2780+a40f65e1
python39-wheel-wheel
AlmaLinux:8
before 1:0.35.1-4.module_el8.6.0+2780+a40f65e1
1:0.35.1-4.module_el8.6.0+2780+a40f65e1
mod_wsgi
Azure Linux:2
before 4.9.3-2
4.9.3-2
mod_wsgi
Bitnami
before 4.9.3
4.9.3
mod-wsgi
Debian:12
before 4.9.0-1.1
4.9.0-1.1
mod-wsgi
Debian:13
before 4.9.0-1.1
4.9.0-1.1
mod-wsgi
Debian:14
before 4.9.0-1.1
4.9.0-1.1
mod-wsgi
Debian:10
before 4.6.5-1+deb10u1, plus listed versions
4.6.5-1
4.6.5-1+deb10u1
mod-wsgi
PyPI
before 4.9.3, plus listed versions
4.1.04.1.14.1.24.1.34.2.0
Show 45 moreShow less
4.2.14.2.24.2.34.2.44.2.54.2.64.2.74.2.84.3.04.3.14.3.24.4.04.4.14.4.104.4.114.4.124.4.134.4.144.4.154.4.164.4.174.4.184.4.194.4.24.4.204.4.214.4.224.4.234.4.34.4.44.4.54.4.64.4.74.4.84.4.94.5.04.5.14.5.104.5.114.5.124.5.134.5.144.5.154.5.164.5.17
4.9.3
apache-mod_wsgi
Mageia:8
before 4.6.8-4.1.mga8
4.6.8-4.1.mga8
mod_wsgi
openEuler:20.03-LTS-SP1
before 4.6.4-3.oe1
4.6.4-3.oe1
mod_wsgi
openEuler:20.03-LTS-SP3
before 4.6.4-3.oe1
4.6.4-3.oe1
mod_wsgi
openEuler:22.03-LTS
before 4.6.4-3.oe2203
4.6.4-3.oe2203
PyYAML
Red Hat:enterprise_linux:8::appstream
before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
PyYAML-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
mod_wsgi
Red Hat:enterprise_linux:8::appstream
before 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
numpy
Red Hat:enterprise_linux:8::appstream
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
numpy-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python-PyMySQL
Red Hat:enterprise_linux:8::appstream
before 0:0.10.1-2.module+el8.9.0+19644+d68f775d
0:0.10.1-2.module+el8.9.0+19644+d68f775d
python-cffi
Red Hat:enterprise_linux:8::appstream
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python-cffi-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python-chardet
Red Hat:enterprise_linux:8::appstream
before 0:3.0.4-19.module+el8.9.0+19644+d68f775d
0:3.0.4-19.module+el8.9.0+19644+d68f775d
python-cryptography
Red Hat:enterprise_linux:8::appstream
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python-cryptography-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python-idna
Red Hat:enterprise_linux:8::appstream
before 0:2.10-4.module+el8.10.0+21815+bb024982
0:2.10-4.module+el8.10.0+21815+bb024982
python-lxml
Red Hat:enterprise_linux:8::appstream
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python-lxml-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python-ply
Red Hat:enterprise_linux:8::appstream
before 0:3.11-10.module+el8.9.0+19644+d68f775d
0:3.11-10.module+el8.9.0+19644+d68f775d
python-psutil
Red Hat:enterprise_linux:8::appstream
before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python-psutil-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python-psycopg2
Red Hat:enterprise_linux:8::appstream
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python-psycopg2-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python-pycparser
Red Hat:enterprise_linux:8::appstream
before 0:2.20-3.module+el8.9.0+19644+d68f775d
0:2.20-3.module+el8.9.0+19644+d68f775d
python-pysocks
Red Hat:enterprise_linux:8::appstream
before 0:1.7.1-4.module+el8.9.0+19644+d68f775d
0:1.7.1-4.module+el8.9.0+19644+d68f775d
python-requests
Red Hat:enterprise_linux:8::appstream
before 0:2.25.0-3.module+el8.9.0+19644+d68f775d
0:2.25.0-3.module+el8.9.0+19644+d68f775d
python-toml
Red Hat:enterprise_linux:8::appstream
before 0:0.10.1-5.module+el8.9.0+19644+d68f775d
0:0.10.1-5.module+el8.9.0+19644+d68f775d
python-urllib3
Red Hat:enterprise_linux:8::appstream
before 0:1.25.10-5.module+el8.10.0+20443+f0a692fe
0:1.25.10-5.module+el8.10.0+20443+f0a692fe
python-wheel
Red Hat:enterprise_linux:8::appstream
before 1:0.35.1-4.module+el8.9.0+19644+d68f775d
1:0.35.1-4.module+el8.9.0+19644+d68f775d
python39
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-PyMySQL
Red Hat:enterprise_linux:8::appstream
before 0:0.10.1-2.module+el8.9.0+19644+d68f775d
0:0.10.1-2.module+el8.9.0+19644+d68f775d
python39-cffi
Red Hat:enterprise_linux:8::appstream
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python39-cffi-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python39-chardet
Red Hat:enterprise_linux:8::appstream
before 0:3.0.4-19.module+el8.9.0+19644+d68f775d
0:3.0.4-19.module+el8.9.0+19644+d68f775d
python39-cryptography
Red Hat:enterprise_linux:8::appstream
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python39-cryptography-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python39-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-devel
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-idle
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-idna
Red Hat:enterprise_linux:8::appstream
before 0:2.10-4.module+el8.10.0+21815+bb024982
0:2.10-4.module+el8.10.0+21815+bb024982
python39-libs
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-lxml
Red Hat:enterprise_linux:8::appstream
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python39-lxml-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python39-mod_wsgi
Red Hat:enterprise_linux:8::appstream
before 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
python39-numpy
Red Hat:enterprise_linux:8::appstream
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python39-numpy-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python39-numpy-doc
Red Hat:enterprise_linux:8::appstream
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python39-numpy-f2py
Red Hat:enterprise_linux:8::appstream
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python39-pip
Red Hat:enterprise_linux:8::appstream
before 0:20.2.4-9.module+el8.10.0+21329+8d76b841
0:20.2.4-9.module+el8.10.0+21329+8d76b841
python39-pip-wheel
Red Hat:enterprise_linux:8::appstream
before 0:20.2.4-9.module+el8.10.0+21329+8d76b841
0:20.2.4-9.module+el8.10.0+21329+8d76b841
python39-ply
Red Hat:enterprise_linux:8::appstream
before 0:3.11-10.module+el8.9.0+19644+d68f775d
0:3.11-10.module+el8.9.0+19644+d68f775d
python39-psutil
Red Hat:enterprise_linux:8::appstream
before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python39-psutil-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python39-psycopg2
Red Hat:enterprise_linux:8::appstream
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python39-psycopg2-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python39-psycopg2-doc
Red Hat:enterprise_linux:8::appstream
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python39-psycopg2-tests
Red Hat:enterprise_linux:8::appstream
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python39-pycparser
Red Hat:enterprise_linux:8::appstream
before 0:2.20-3.module+el8.9.0+19644+d68f775d
0:2.20-3.module+el8.9.0+19644+d68f775d
python39-pysocks
Red Hat:enterprise_linux:8::appstream
before 0:1.7.1-4.module+el8.9.0+19644+d68f775d
0:1.7.1-4.module+el8.9.0+19644+d68f775d
python39-pyyaml
Red Hat:enterprise_linux:8::appstream
before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
python39-pyyaml-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
python39-requests
Red Hat:enterprise_linux:8::appstream
before 0:2.25.0-3.module+el8.9.0+19644+d68f775d
0:2.25.0-3.module+el8.9.0+19644+d68f775d
python39-rpm-macros
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-scipy
Red Hat:enterprise_linux:8::appstream
before 0:1.5.4-5.module+el8.9.0+19644+d68f775d
0:1.5.4-5.module+el8.9.0+19644+d68f775d
python39-scipy-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:1.5.4-5.module+el8.9.0+19644+d68f775d
0:1.5.4-5.module+el8.9.0+19644+d68f775d
python39-setuptools
Red Hat:enterprise_linux:8::appstream
before 0:50.3.2-6.module+el8.10.0+22183+c898c0c1
0:50.3.2-6.module+el8.10.0+22183+c898c0c1
python39-setuptools-wheel
Red Hat:enterprise_linux:8::appstream
before 0:50.3.2-6.module+el8.10.0+22183+c898c0c1
0:50.3.2-6.module+el8.10.0+22183+c898c0c1
python39-six
Red Hat:enterprise_linux:8::appstream
before 0:1.15.0-3.module+el8.9.0+19644+d68f775d
0:1.15.0-3.module+el8.9.0+19644+d68f775d
python39-test
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-tkinter
Red Hat:enterprise_linux:8::appstream
before 0:3.9.20-1.module+el8.10.0+22342+478c159e
0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-toml
Red Hat:enterprise_linux:8::appstream
before 0:0.10.1-5.module+el8.9.0+19644+d68f775d
0:0.10.1-5.module+el8.9.0+19644+d68f775d
python39-urllib3
Red Hat:enterprise_linux:8::appstream
before 0:1.25.10-5.module+el8.10.0+20443+f0a692fe
0:1.25.10-5.module+el8.10.0+20443+f0a692fe
python39-wheel
Red Hat:enterprise_linux:8::appstream
before 1:0.35.1-4.module+el8.9.0+19644+d68f775d
1:0.35.1-4.module+el8.9.0+19644+d68f775d
python39-wheel-wheel
Red Hat:enterprise_linux:8::appstream
before 1:0.35.1-4.module+el8.9.0+19644+d68f775d
1:0.35.1-4.module+el8.9.0+19644+d68f775d
python3x-pip
Red Hat:enterprise_linux:8::appstream
before 0:20.2.4-9.module+el8.10.0+21329+8d76b841
0:20.2.4-9.module+el8.10.0+21329+8d76b841
python3x-setuptools
Red Hat:enterprise_linux:8::appstream
before 0:50.3.2-6.module+el8.10.0+22183+c898c0c1
0:50.3.2-6.module+el8.10.0+22183+c898c0c1
python3x-six
Red Hat:enterprise_linux:8::appstream
before 0:1.15.0-3.module+el8.9.0+19644+d68f775d
0:1.15.0-3.module+el8.9.0+19644+d68f775d
scipy
Red Hat:enterprise_linux:8::appstream
before 0:1.5.4-5.module+el8.9.0+19644+d68f775d
0:1.5.4-5.module+el8.9.0+19644+d68f775d
scipy-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:1.5.4-5.module+el8.9.0+19644+d68f775d
0:1.5.4-5.module+el8.9.0+19644+d68f775d
mod_wsgi
Rocky Linux:8
before 0:4.7.1-7.module+el8.10.0+1582+bc278001
0:4.7.1-7.module+el8.10.0+1582+bc278001
mod_wsgi
Rocky Linux:8
before 0:4.7.1-7.module+el8.10.0+1860+afcc1c71
0:4.7.1-7.module+el8.10.0+1860+afcc1c71
mod_wsgi
Rocky Linux:8
before 0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1
0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1
numpy
Rocky Linux:8
before 0:1.19.4-3.module+el8.10.0+1582+bc278001
0:1.19.4-3.module+el8.10.0+1582+bc278001
numpy
Rocky Linux:8
before 0:1.19.4-3.module+el8.10.0+1860+afcc1c71
0:1.19.4-3.module+el8.10.0+1860+afcc1c71
python39
Rocky Linux:8
before 0:3.9.20-1.module+el8.10.0+1876+829fd4e0
0:3.9.20-1.module+el8.10.0+1876+829fd4e0
python3x-pip
Rocky Linux:8
before 0:20.2.4-9.module+el8.10.0+1721+e52d6351
0:20.2.4-9.module+el8.10.0+1721+e52d6351
python3x-pip
Rocky Linux:8
before 0:20.2.4-9.module+el8.10.0+1860+afcc1c71
0:20.2.4-9.module+el8.10.0+1860+afcc1c71
python3x-setuptools
Rocky Linux:8
before 0:50.3.2-6.module+el8.10.0+1861+0f5e39ec
0:50.3.2-6.module+el8.10.0+1861+0f5e39ec
python3x-six
Rocky Linux:8
before 0:1.15.0-3.module+el8.10.0+1860+afcc1c71
0:1.15.0-3.module+el8.10.0+1860+afcc1c71
python3x-six
Rocky Linux:8
before 0:1.15.0-3.module+el8.10.0+1582+bc278001
0:1.15.0-3.module+el8.10.0+1582+bc278001
python-cffi
Rocky Linux:8
before 0:1.14.3-2.module+el8.10.0+1582+bc278001
0:1.14.3-2.module+el8.10.0+1582+bc278001
python-cffi
Rocky Linux:8
before 0:1.14.3-2.module+el8.10.0+1860+afcc1c71
0:1.14.3-2.module+el8.10.0+1860+afcc1c71
python-chardet
Rocky Linux:8
before 0:3.0.4-19.module+el8.10.0+1582+bc278001
0:3.0.4-19.module+el8.10.0+1582+bc278001
python-chardet
Rocky Linux:8
before 0:3.0.4-19.module+el8.10.0+1860+afcc1c71
0:3.0.4-19.module+el8.10.0+1860+afcc1c71
python-chardet
Rocky Linux:8
before 0:3.0.4-19.module+el8.9.0+1418+f0d66789
0:3.0.4-19.module+el8.9.0+1418+f0d66789
python-cryptography
Rocky Linux:8
before 0:3.3.1-3.module+el8.10.0+1697+7e517775
0:3.3.1-3.module+el8.10.0+1697+7e517775
python-cryptography
Rocky Linux:8
before 0:3.3.1-3.module+el8.10.0+1860+afcc1c71
0:3.3.1-3.module+el8.10.0+1860+afcc1c71
python-idna
Rocky Linux:8
before 0:2.10-4.module+el8.10.0+1809+41195054
0:2.10-4.module+el8.10.0+1809+41195054
python-idna
Rocky Linux:8
before 0:2.10-4.module+el8.10.0+1860+afcc1c71
0:2.10-4.module+el8.10.0+1860+afcc1c71
python-lxml
Rocky Linux:8
before 0:4.6.5-1.module+el8.10.0+1582+bc278001
0:4.6.5-1.module+el8.10.0+1582+bc278001
python-ply
Rocky Linux:8
before 0:3.11-10.module+el8.10.0+1582+bc278001
0:3.11-10.module+el8.10.0+1582+bc278001
python-ply
Rocky Linux:8
before 0:3.11-10.module+el8.10.0+1860+afcc1c71
0:3.11-10.module+el8.10.0+1860+afcc1c71
python-ply
Rocky Linux:8
before 0:3.11-10.module+el8.9.0+1418+f0d66789
0:3.11-10.module+el8.9.0+1418+f0d66789
python-psutil
Rocky Linux:8
before 0:5.8.0-4.module+el8.9.0+1357+a3b80af7
0:5.8.0-4.module+el8.9.0+1357+a3b80af7
python-psycopg2
Rocky Linux:8
before 0:2.8.6-3.module+el8.10.0+1860+afcc1c71
0:2.8.6-3.module+el8.10.0+1860+afcc1c71
python-psycopg2
Rocky Linux:8
before 0:2.8.6-3.module+el8.10.0+1660+b5b6f004
0:2.8.6-3.module+el8.10.0+1660+b5b6f004
python-pycparser
Rocky Linux:8
before 0:2.20-3.module+el8.10.0+1582+bc278001
0:2.20-3.module+el8.10.0+1582+bc278001
python-pycparser
Rocky Linux:8
before 0:2.20-3.module+el8.10.0+1860+afcc1c71
0:2.20-3.module+el8.10.0+1860+afcc1c71
python-PyMySQL
Rocky Linux:8
before 0:0.10.1-2.module+el8.10.0+1592+61442852
0:0.10.1-2.module+el8.10.0+1592+61442852
python-PyMySQL
Rocky Linux:8
before 0:0.10.1-2.module+el8.10.0+1860+afcc1c71
0:0.10.1-2.module+el8.10.0+1860+afcc1c71
python-PyMySQL
Rocky Linux:8
before 0:0.10.1-2.module+el8.10.0+1910+234ad790
0:0.10.1-2.module+el8.10.0+1910+234ad790
python-PyMySQL
Rocky Linux:8
before 0:0.10.1-2.module+el8.10.0+1582+bc278001
0:0.10.1-2.module+el8.10.0+1582+bc278001
python-pysocks
Rocky Linux:8
before 0:1.7.1-4.module+el8.10.0+1582+bc278001
0:1.7.1-4.module+el8.10.0+1582+bc278001
python-pysocks
Rocky Linux:8
before 0:1.7.1-4.module+el8.10.0+1860+afcc1c71
0:1.7.1-4.module+el8.10.0+1860+afcc1c71
python-pysocks
Rocky Linux:8
before 0:1.7.1-4.module+el8.9.0+1418+f0d66789
0:1.7.1-4.module+el8.9.0+1418+f0d66789
python-requests
Rocky Linux:8
before 0:2.25.0-3.module+el8.10.0+1582+bc278001
0:2.25.0-3.module+el8.10.0+1582+bc278001
python-requests
Rocky Linux:8
before 0:2.25.0-3.module+el8.10.0+1860+afcc1c71
0:2.25.0-3.module+el8.10.0+1860+afcc1c71
python-toml
Rocky Linux:8
before 0:0.10.1-5.module+el8.9.0+1332+dd574197
0:0.10.1-5.module+el8.9.0+1332+dd574197
python-urllib3
Rocky Linux:8
before 0:1.25.10-5.module+el8.10.0+1860+afcc1c71
0:1.25.10-5.module+el8.10.0+1860+afcc1c71
python-urllib3
Rocky Linux:8
before 0:1.25.10-5.module+el8.10.0+1545+03246da9
0:1.25.10-5.module+el8.10.0+1545+03246da9
python-wheel
Rocky Linux:8
before 1:0.35.1-4.module+el8.10.0+1582+bc278001
1:0.35.1-4.module+el8.10.0+1582+bc278001
python-wheel
Rocky Linux:8
before 1:0.35.1-4.module+el8.10.0+1860+afcc1c71
1:0.35.1-4.module+el8.10.0+1860+afcc1c71
PyYAML
Rocky Linux:8
before 0:5.4.1-1.module+el8.10.0+1582+bc278001
0:5.4.1-1.module+el8.10.0+1582+bc278001
PyYAML
Rocky Linux:8
before 0:5.4.1-1.module+el8.10.0+1860+afcc1c71
0:5.4.1-1.module+el8.10.0+1860+afcc1c71
PyYAML
Rocky Linux:8
before 0:5.4.1-1.module+el8.9.0+1418+f0d66789
0:5.4.1-1.module+el8.9.0+1418+f0d66789
scipy
Rocky Linux:8
before 0:1.5.4-5.module+el8.10.0+1582+bc278001
0:1.5.4-5.module+el8.10.0+1582+bc278001
scipy
Rocky Linux:8
before 0:1.5.4-5.module+el8.10.0+1860+afcc1c71
0:1.5.4-5.module+el8.10.0+1860+afcc1c71
apache2-mod_wsgi
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
before 4.7.1-150400.3.3.1
4.7.1-150400.3.3.1
apache2-mod_wsgi
openSUSE:Leap 15.4
before 4.7.1-150400.3.3.1
4.7.1-150400.3.3.1
apache2-mod_wsgi
SUSE:HPE Helion OpenStack 8
before 4.4.13-3.3.1
4.4.13-3.3.1
apache2-mod_wsgi
SUSE:OpenStack Cloud 8
before 4.4.13-3.3.1
4.4.13-3.3.1
apache2-mod_wsgi
SUSE:OpenStack Cloud Crowbar 8
before 4.4.13-3.3.1
4.4.13-3.3.1
apache2-mod_wsgi
SUSE:Linux Enterprise Module for Public Cloud 12
before 4.4.13-3.3.1
4.4.13-3.3.1
apache2-mod_wsgi
SUSE:Linux Enterprise Module for Web and Scripting 12
before 4.4.13-3.3.1
4.4.13-3.3.1
apache2-mod_wsgi
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
SUSE:Manager Proxy Module 4.1
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
SUSE:Manager Proxy Module 4.2
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
SUSE:Manager Proxy Module 4.3
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
SUSE:Linux Enterprise Module for Server Applications 15 SP3
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
SUSE:Linux Enterprise Module for Server Applications 15 SP4
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi
openSUSE:Leap 15.3
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
openSUSE:Leap 15.3
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
apache2-mod_wsgi-python3
openSUSE:Leap 15.4
before 4.5.18-150000.4.6.1
4.5.18-150000.4.6.1
mod-wsgi
Ubuntu:18.04:LTS
before 4.5.17-1ubuntu1.1, plus listed versions
4.5.17-14.5.17-1ubuntu1
4.5.17-1ubuntu1.1
mod-wsgi
Ubuntu:20.04:LTS
before 4.6.8-1ubuntu3.1, plus listed versions
4.6.5-14.6.8-0ubuntu14.6.8-14.6.8-1build14.6.8-1ubuntu14.6.8-1ubuntu24.6.8-1ubuntu3
4.6.8-1ubuntu3.1
mod-wsgi
Ubuntu:22.04:LTS
before 4.9.0-1ubuntu0.1, plus listed versions
4.7.1-3build24.9.0-14.9.0-1build1
4.9.0-1ubuntu0.1
apache2-mod_wsgi
openSUSE:Tumbleweed
before 4.9.4-1.1
4.9.4-1.1

History

History
RecordedChangedSources
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-2255 is a high vulnerability (CVSS 7.5) in Mod Wsgi Wsgi, published July 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.94%, the 61st percentile. Fixed in mod-wsgi 4.9.3.

References

Show 23 moreShow less
This page doesn't list everything

Left out here: 30 versions. The JSON record has them.

MoveEnter Open