Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache HTTP Server

139 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-41773 Exploited · Ransomware Public exploit EPSS 100%

    Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

    A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
    KEV Nov 3, 2021