mod_proxy_cluster vulnerabilities

A flaw was found in mod_proxy_cluster: a CRLF injection in the decodeenc() function allows a remote attacker to bypass input validation. By injecting CRLF sequences into the cluster configuration, an attacker can corrupt the response body of INFO endpoint responses. Exploitation requires network access to the MCMP protocol port but no authentication.

A vulnerability was found in mod_proxy_cluster where the <Directory> directive is incorrectly used instead of <Location>. The <Directory> directive does not restrict access based on IP address, allowing anyone with host access to send MCMP requests that can add, remove, or update load-balancing nodes.

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page.