Debian/apache2: medium 5.4
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an un
Action: Upgrade apache2 to 2.4.66-1~deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.66-1~deb12u1 | - |
Fixed versions
| 2.4.66-1~deb12u1 |
Sources
published · modified · JSON