Debian/apache2: critical 9.1
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not int
Action: Upgrade apache2 to 2.4.61-1~deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.61-1~deb12u1 | - |
Fixed versions
| 2.4.61-1~deb12u1 |
Sources
published · modified · JSON