Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9pw3-5ggm-c92r

Опубликовано: 04 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

Users are recommended to upgrade to version 2.4.67, which fixes this issue.

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

Users are recommended to upgrade to version 2.4.67, which fixes this issue.

EPSS

Процентиль: 47%
0.00654
Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

CVSS3: 5.5
redhat
3 месяца назад

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

CVSS3: 8.8
nvd
3 месяца назад

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

CVSS3: 6.5
msrc
3 месяца назад

Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

CVSS3: 8.8
debian
3 месяца назад

An escalation of privilege bug in various modules in Apache HTTP 2.4.6 ...

EPSS

Процентиль: 47%
0.00654
Низкий

8.8 High

CVSS3

Дефекты

CWE-269