vulnerability

OS X update for apache (CVE-2022-22720)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Mar 14, 2022
Added
May 17, 2022
Modified
Aug 13, 2025

Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Solutions

apple-osx-security-update-2022-004-catalinaapple-osx-upgrade-11_6_6apple-osx-upgrade-12_4
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.