Alpine/apache2: critical 9.1
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not int
Action: Upgrade apache2 to 2.4.60-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.60-r0 | - |
Fixed versions
| 2.4.60-r0 |
Sources
- osv: ALPINE-CVE-2024-38475#Alpine:v3.22/apache2
- https://security.alpinelinux.org/vuln/CVE-2024-38475
published · modified · JSON