Description
Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache HTTP Server | Apache Software Foundation / Apache HTTP Server | >= 2.4.0, <= 2.4.59 | affected |
| http_server | apache / http_server | >= 2.4.0, <= 2.4.59 | affected |
| ontap_9 | netapp / ontap_9 | >= 0, < * | affected |