CVE-2014-0242

CVE-2014-0242 describes an information disclosure vulnerability in the mod_wsgi module for Apache, specifically versions prior to 3.4, when operating in embedded mode. Attackers could potentially obtain sensitive information by exploiting a flaw where the Content-Type header is generated from memory that may have been freed and subsequently overwritten by a separate thread. This vulnerability has a high CVSS score of 7.5, indicating a severe risk with network-based attacks requiring low complexity and no user interaction, leading to a high impact on confidentiality. While not listed on CISA's KEV catalog, there is a public exploit available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.