CVE-2023-25690 — Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

Description

Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.

Configurations are affected when mod_proxy is enabled along with some form of RewriteRule
or ProxyPassMatch in which a non-specific pattern matches
some portion of the user-supplied request-target (URL) data and is then
re-inserted into the proxied request-target using variable
substitution. For example, something like:

RewriteEngine on
RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P]
ProxyPassReverse /here/ http://example.com:8080/

Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache HTTP Server	2.4.0 – ≤ 2.4.55	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	apache2	2.4.56-1	—
Debian 13	apache2	2.4.56-1	—
Debian 12	apache2	2.4.56-1	—
Debian 11	apache2	2.4.56-1~deb11u1	DSA-5376-1
Debian 10	apache2	2.4.38-3+deb10u10	DLA-3401-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 22.04 LTS	apache2	2.4.52-1ubuntu4.4	USN-5942-1
Ubuntu 20.04 LTS	apache2	2.4.41-4ubuntu3.14	USN-5942-1
Ubuntu 18.04 LTS	apache2	2.4.29-1ubuntu4.27	USN-5942-1

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 16.04 LTS	apache2	2.4.18-2ubuntu3.17+esm10	USN-5942-2
Ubuntu Pro 14.04 LTS	apache2	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	httpd +8	2.4.53-7.el9_1.5	RHSA-2023:1670
RHEL 9	mod_http2	1.15.19-3.el9_1.5	RHSA-2023:1670
RHEL 9	mod_ssl +1	1:2.4.53-7.el9_1.5	RHSA-2023:1670
RHEL 8	httpd +6	2.4.37-51.module+el8.7.0+18499+2e106f0b.5	RHSA-2023:1673
RHEL 8	mod_http2	1.15.7-5.module+el8.7.0+18499+2e106f0b.4	RHSA-2023:1673
RHEL 8	mod_md	1:2.0.8-8.module+el8.3.0+6814+67d1e611	RHSA-2023:1673
RHEL 8	mod_ssl +1	1:2.4.37-51.module+el8.7.0+18499+2e106f0b.5	RHSA-2023:1673
RHEL 7	httpd +5	2.4.6-98.el7_9.7	RHSA-2023:1593
RHEL 7	mod_ssl +1	1:2.4.6-98.el7_9.7	RHSA-2023:1593
RHEL 3	httpd24-httpd +5	2.4.34-23.el7.6	RHSA-2023:3292
RHEL 3	httpd24-mod_ssl +1	1:2.4.34-23.el7.6	RHSA-2023:3292

Show 8 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 9.0 EUS	httpd +7	2.4.51-7.el9_0.4	RHSA-2023:1916
RHEL 9.0 EUS	mod_http2	1.15.19-3.el9_0.5	RHSA-2023:1916
RHEL 9.0 EUS	mod_ssl +1	1:2.4.51-7.el9_0.4	RHSA-2023:1916
RHEL 8.6 EUS	httpd +6	2.4.37-47.module+el8.6.0+18507+843660a1.4	RHSA-2023:1597
RHEL 8.6 EUS	mod_http2	1.15.7-5.module+el8.6.0+18506+34b194fb.2	RHSA-2023:1597
RHEL 8.6 EUS	mod_md	1:2.0.8-8.module+el8.3.0+6814+67d1e611	RHSA-2023:1597
RHEL 8.6 EUS	mod_ssl +1	1:2.4.37-47.module+el8.6.0+18507+843660a1.4	RHSA-2023:1597
RHEL 8.4 EUS	httpd +6	2.4.37-39.module+el8.4.0+18509+78723510.6	RHSA-2023:1596
RHEL 8.4 EUS	mod_http2	1.15.7-3.module+el8.4.0+18512+9c29e63a.2	RHSA-2023:1596
RHEL 8.4 EUS	mod_md	1:2.0.8-8.module+el8.3.0+6814+67d1e611	RHSA-2023:1596
RHEL 8.4 EUS	mod_ssl +1	1:2.4.37-39.module+el8.4.0+18509+78723510.6	RHSA-2023:1596
RHEL 8.2 TUS	httpd +6	2.4.37-21.module+el8.2.0+18510+68528e70.6	RHSA-2023:1672
RHEL 8.2 TUS	mod_http2	1.11.3-3.module+el8.2.0+18513+b6a58d46.3	RHSA-2023:1672
RHEL 8.2 TUS	mod_md	1:2.0.8-7.module+el8.2.0+5531+7e4d69a2	RHSA-2023:1672
RHEL 8.2 TUS	mod_ssl +1	1:2.4.37-21.module+el8.2.0+18510+68528e70.6	RHSA-2023:1672
RHEL 8.2 E4S	httpd +6	2.4.37-21.module+el8.2.0+18510+68528e70.6	RHSA-2023:1672
RHEL 8.2 E4S	mod_http2	1.11.3-3.module+el8.2.0+18513+b6a58d46.3	RHSA-2023:1672
RHEL 8.2 E4S	mod_md	1:2.0.8-7.module+el8.2.0+5531+7e4d69a2	RHSA-2023:1672
RHEL 8.2 E4S	mod_ssl +1	1:2.4.37-21.module+el8.2.0+18510+68528e70.6	RHSA-2023:1672
RHEL 8.2 AUS	httpd +6	2.4.37-21.module+el8.2.0+18510+68528e70.6	RHSA-2023:1672
RHEL 8.2 AUS	mod_http2	1.11.3-3.module+el8.2.0+18513+b6a58d46.3	RHSA-2023:1672
RHEL 8.2 AUS	mod_md	1:2.0.8-7.module+el8.2.0+5531+7e4d69a2	RHSA-2023:1672
RHEL 8.2 AUS	mod_ssl +1	1:2.4.37-21.module+el8.2.0+18510+68528e70.6	RHSA-2023:1672
RHEL 8.1 E4S	httpd +7	2.4.37-16.module+el8.1.0+18511+ffefe478.6	RHSA-2023:1547
RHEL 8.1 E4S	mod_http2	1.11.3-3.module+el8.1.0+18514+ae5f89d3.3	RHSA-2023:1547
RHEL 8.1 E4S	mod_ssl +1	1:2.4.37-16.module+el8.1.0+18511+ffefe478.6	RHSA-2023:1547
Red Hat JBoss Core Services 1	jbcs-httpd24-apr-util +8	1.6.1-101.el7jbcs	RHSA-2023:3354
Red Hat JBoss Core Services 1	jbcs-httpd24-curl +2	8.0.1-1.el7jbcs	RHSA-2023:3354
Red Hat JBoss Core Services 1	jbcs-httpd24-httpd +6	2.4.51-39.el7jbcs	RHSA-2023:3354
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_ssl +1	1:2.4.51-39.el7jbcs	RHSA-2023:3354
Red Hat JBoss Core Services 1	jbcs-httpd24-openssl +4	1:1.1.1k-14.el7jbcs	RHSA-2023:3354

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	httpd +8	2.4.53-7.el9_1.5	ALSA-2023:1670
AlmaLinux 9	mod_http2	1.15.19-3.el9_1.5	ALSA-2023:1670
AlmaLinux 9	mod_ssl +1	1:2.4.53-7.el9_1.5	ALSA-2023:1670
AlmaLinux 8	httpd +6	2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5	ALSA-2023:1673
AlmaLinux 8	mod_http2	1.15.7-5.module_el8.7.0+3515+9e4fe0d6.4	ALSA-2023:1673
AlmaLinux 8	mod_md	1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa	ALSA-2023:1673
AlmaLinux 8	mod_ssl +1	1:2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5	ALSA-2023:1673

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 9	httpd	2.4.53-7.el9_1.5	RLSA-2023:1670
Rocky Linux 9	mod_http2	1.15.19-3.el9_1.5	RLSA-2023:1670
Rocky Linux 8	httpd	2.4.37-51.module+el8.7.0+1059+126e9251	RLSA-2023:1673
Rocky Linux 8	mod_http2	1.15.7-5.module+el8.6.0+823+f143cee1	RLSA-2023:1673
Rocky Linux 8	mod_md	1:2.0.8-8.module+el8.5.0+695+1fa8055e	RLSA-2023:1673

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP5	apache2	2.4.66-150400.6.57.1	SUSE-SU-2026:2686-1
SLES 15 SP4	apache2	2.4.51-150400.6.11.1	SUSE-SU-2026:2686-1, SUSE-SU-2023:1658-1
SLES 15 SP3	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLES 15 SP2	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLES 15 SP1	apache2	2.4.33-150000.3.75.1	SUSE-SU-2023:0799-1

Show 22 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 12 SP5	apache2	2.4.51-35.25.1	SUSE-SU-2023:0764-1
SLES 12 SP4	apache2	2.4.23-29.97.1	SUSE-SU-2023:0803-1
SLES 12 SP2	apache2	2.4.23-29.97.1	SUSE-SU-2023:0803-1
SLES for SAP 15 SP5	apache2	2.4.66-150400.6.57.1	SUSE-SU-2026:2686-1
SLES for SAP 15 SP4	apache2	2.4.66-150400.6.57.1	SUSE-SU-2026:2686-1
SLES for SAP 15 SP3	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLES for SAP 15 SP2	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLES for SAP 15 SP1	apache2	2.4.33-150000.3.75.1	SUSE-SU-2023:0799-1
SLES for SAP 12 SP5	apache2	2.4.51-35.25.1	SUSE-SU-2023:0764-1
SLES for SAP 12 SP4	apache2	2.4.23-29.97.1	SUSE-SU-2023:0803-1
SLE Real Time 15 SP3	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLE HPC 15 SP5	apache2	2.4.66-150400.6.57.1	SUSE-SU-2026:2686-1
SLE HPC 15 SP4	apache2	2.4.66-150400.6.57.1	SUSE-SU-2026:2686-1
SLE HPC 15 SP3	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLE HPC 15 SP2	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SLE HPC 15 SP1	apache2	2.4.33-150000.3.75.1	SUSE-SU-2023:0799-1
SUSE OpenStack Cloud Crowbar 9	apache2	2.4.23-29.97.1	SUSE-SU-2023:0803-1
SUSE OpenStack Cloud 9	apache2	2.4.23-29.97.1	SUSE-SU-2023:0803-1
SUSE Manager Server 4.2	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SUSE Manager Proxy 4.2	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SUSE Enterprise Storage 7.1	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1
SUSE Enterprise Storage 7	apache2	2.4.51-150200.3.56.1	SUSE-SU-2023:1573-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	apache2	2.4.56-1.1	openSUSE-SU-2024:12776-1
openSUSE Leap 15.4	apache2	2.4.51-150400.6.11.1	SUSE-SU-2023:1658-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	apache2	2.4.56-r0	—
Alpine v3.23	apache2	2.4.56-r0	—
Alpine v3.22	apache2	2.4.56-r0	—
Alpine v3.21	apache2	2.4.56-r0	—
Alpine v3.20	apache2	2.4.56-r0	—

Show 6 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	apache2	2.4.56-r0	—
Alpine v3.18	apache2	2.4.56-r0	—
Alpine v3.17	apache2	2.4.56-r0	—
Alpine v3.16	apache2	2.4.56-r0	—
Alpine v3.15	apache2	2.4.56-r0	—
Alpine v3.14	apache2	2.4.56-r0	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	httpd +8	2.4.56-1.amzn2023	ALAS2023-2023-136
Amazon Linux 2023	mod_ssl +1	1:2.4.56-1.amzn2023	ALAS2023-2023-136
Amazon Linux 2	httpd +7	2.4.56-1.amzn2	ALAS2-2023-1989
Amazon Linux 2	mod_ssl +1	1:2.4.56-1.amzn2	ALAS2-2023-1989

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	mod_http2	2.0.29-3	—
Azure Linux 2 (CBL-Mariner)	httpd	2.4.56-1	—
Azure Linux 2 (CBL-Mariner)	mod_http2	No fix yet	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	httpd +8	2.4.53-7.0.1.el9_1.5	ELSA-2023-1670
Oracle Linux 9	mod_http2	1.15.19-3.el9_1.5	ELSA-2023-1670
Oracle Linux 9	mod_ssl +1	1:2.4.53-7.0.1.el9_1.5	ELSA-2023-1670
Oracle Linux 8	httpd +6	2.4.37-51.0.1.module+el8.7.0+21029+de29ba63.5	ELSA-2023-1673
Oracle Linux 8	mod_http2	1.15.7-5.module+el8.7.0+21029+de29ba63.4	ELSA-2023-1673
Oracle Linux 8	mod_md	1:2.0.8-8.module+el8.5.0+20475+4f6a8fd5	ELSA-2023-1673
Oracle Linux 8	mod_ssl +1	1:2.4.37-51.0.1.module+el8.7.0+21029+de29ba63.5	ELSA-2023-1673
Oracle Linux 7	httpd +5	2.4.6-98.0.3.el7_9.7	ELSA-2023-1593
Oracle Linux 7	mod_ssl +1	1:2.4.6-98.0.3.el7_9.7	ELSA-2023-1593

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 7 repositories

dhmosfunk/CVE-2023-25690-POC ★ 287 · May 22, 2023

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.
thanhlam-attt/CVE-2023-25690 ★ 4 · Dec 4, 2023
oOCyginXOo/CVE-2023-25690-POC ★ 2 · Jun 1, 2025

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.
roshanrajbanshi/cve-2023-25690-smuggler ★ 1 · Sep 25, 2026

Python exploit for CVE-2023-25690 — Apache HTTP Request Smuggling via CRLF injection in mod_rewrite/mod_proxy. Built and tested against TryHackMe's Contrabando box.
arnavps/CTF-Web-Exploitation ★ 1 · Apr 5, 2026

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced XSS/RCE chains
tbachvarova/linux-apache-fix-mod_rewrite-spaceInURL ★ 1 · Apr 25, 2023

Fix URL containing SPACES after Apache upgrade CVE-2023-25690
giordy0424/CVE-2023-25690_lab ★ 0 · Jul 16, 2026

HTTP Request Smuggling lab: Apache 2.4.55 CRLF injection

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

ALSA-2023:1670 Important: httpd and mod_http2 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2023:1673 Important: httpd:2.4 security update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2023:3354 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP2 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
WID-SEC-2023-2031 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
RHSA-2023:3292 Red Hat Security Advisory: httpd24-httpd security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1916 Red Hat Security Advisory: httpd and mod_http2 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1673 Red Hat Security Advisory: httpd:2.4 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1672 Red Hat Security Advisory: httpd:2.4 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1597 Red Hat Security Advisory: httpd:2.4 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1670 Red Hat Security Advisory: httpd and mod_http2 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1596 Red Hat Security Advisory: httpd:2.4 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1593 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
RHSA-2023:1547 Red Hat Security Advisory: httpd:2.4 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
WID-SEC-2023-0583 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting BSI CERT-Bund (WID) · Sep 10, 2026
WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
NCSC-2026-0246 Kwetsbaarheden verholpen in Adobe Experience Manager NCSC-NL (Netherlands) · Jul 17, 2026
SUSE-SU-2026:2686-1 Security update for apache2 SUSE / openSUSE Security Updates · Jul 1, 2026
USN-5942-2 apache2 vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
USN-5942-1 apache2 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
DSA-5376-1 apache2 - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-3401-1 apache2 - security update Debian Security (DSA / DLA) · Mar 9, 2026
RLSA-2023:1670 Important: httpd and mod_http2 security update Rocky Linux Security Advisories · Feb 5, 2026
RLSA-2023:1673 Important: httpd:2.4 security update Rocky Linux Security Advisories · Feb 4, 2026
openSUSE-SU-2024:12776-1 apache2-2.4.56-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:0803-1 Security update for apache2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:1573-1 Security update for apache2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:0799-1 Security update for apache2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:1658-1 Security update for apache2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:0764-1 Security update for apache2 SUSE / openSUSE Security Updates · Feb 4, 2026
FSA-202302 Festo: Several vulnerabilities in FactoryViews CERT@VDE · Feb 2, 2026
ICSA-26-027-02 Festo Didactic SE MES PC CISA ICS & IT advisories · Jan 27, 2026
FSA-202402 Several Vulnerabilities in MES PC (Windows 10) CERT@VDE · Dec 8, 2025
WID-SEC-2023-1424 Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2025
WID-SEC-2025-1285 Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Aug 5, 2025
ICSA-25-105-08 ABB M2M Gateway CISA ICS & IT advisories · Apr 7, 2025
2NGA002579 ABB Arctic communication solution ARM600 Vulnerabilities ABB PSIRT · Apr 7, 2025
ICSA-25-133-01 Hitachi Energy Service Suite CISA ICS & IT advisories · Feb 25, 2025
WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
SSA-943925 SSA-943925: Multiple Vulnerabilities in SINEC NMS before V2.0 SP1 Siemens ProductCERT · Mar 12, 2024
ICSA-24-046-15 Siemens SINEC NMS CISA ICS & IT advisories · Mar 12, 2024
SSA-806742 SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 Siemens ProductCERT · Feb 13, 2024
ICSA-24-046-11 Siemens SCALANCE XCM-/XRM-300 CISA ICS & IT advisories · Feb 13, 2024
WID-SEC-2023-1807 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 26, 2023
WID-SEC-2023-3129 Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Dec 19, 2023
WID-SEC-2023-2694 Oracle Hyperion: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 17, 2023
WID-SEC-2023-1809 Oracle Enterprise Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
WID-SEC-2023-1021 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023
ELSA-2023-1673 Important: httpd:2.4 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 7, 2023
ELSA-2023-1670 Important: httpd and mod_http2 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Apr 6, 2023
ELSA-2023-1593 Important: httpd security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 5, 2023

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Alpine

Amazon Linux

Azure Linux

Oracle Linux

Public exploits

GitHub 7 repositories

Advisories 50

References