Alpine/apache2: medium 5.4
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an un
Action: Upgrade apache2 to 2.4.66-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.66-r0 | - |
Fixed versions
| 2.4.66-r0 |
Sources
- osv: ALPINE-CVE-2025-66200#Alpine:v3.21/apache2
- https://security.alpinelinux.org/vuln/CVE-2025-66200
published · modified · JSON