Поиск уязвимостей
Количество 23
Количество 23
GHSA-29h7-gr57-5f8r
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document root. If files outside of the document root are not protected by "require all denied" these requests can succeed. Additionally this flaw could leak the source of interpreted files like CGI scripts. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions.
BDU:2021-04903
Уязвимость веб-сервера Apache HTTP Server, связанная с недостатками ограничения имени пути к каталогу, позволяющая нарушителю выполнить произвольный код или прочитать произвольные файлы в целевой системе
ALT-PU-2021-3013
ALT-PU-2021-3013: package `apache2` update to version 2.4.51-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-29h7-gr57-5f8r A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document root. If files outside of the document root are not protected by "require all denied" these requests can succeed. Additionally this flaw could leak the source of interpreted files like CGI scripts. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. | CVSS3: 7.5 | 100% Критический | больше 4 лет назад |
 | BDU:2021-04903 Уязвимость веб-сервера Apache HTTP Server, связанная с недостатками ограничения имени пути к каталогу, позволяющая нарушителю выполнить произвольный код или прочитать произвольные файлы в целевой системе | CVSS3: 8.1 | 100% Критический | около 5 лет назад |
| ALT-PU-2021-3013 ALT-PU-2021-3013: package `apache2` update to version 2.4.51-alt1 | CVSS3: 9.8 | 100% Критический | около 5 лет назад |
Уязвимостей на страницу