vulnerability

Apache HTTPD: Unexpected URL matching with 'MergeSlashes OFF' (CVE-2021-30641)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Jun 10, 2021
Added
Dec 22, 2021
Modified
Dec 9, 2024

Description

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'

Solution

apache-httpd-upgrade-latest

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.