CVE-2024-38475 — Vulnerability intelligence

Apache — HTTP Server

Published: 2024-07-01T18:15:12.292Z

CVSS

9.1

CISA KEV

Known exploitation

Original source text (not a translation)

Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.

Sources

• Apache HTTP Server Improper Escaping of Output Vulnerability
• Original advisory
• Original advisory
• CVE-2024-38475