説明
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, perform cross-site scripting attack, cause denial of service.
Below is a complete list of vulnerabilities:
- Insufficient escaping of user-supplied data vulnerability can be exploited to obtain sensitive information.
- Security vulnerability in some mod_ssl configurations vulnerability can be exploited to bypass security restrictions.
- SSRF vulnerability in Apache HTTP Server can be exploited to obtain sensitive information.
- Access control bypass vulnerability can be exploited to bypass security restrictions.
- Late Release of Memory after Effective Lifetime vulnerability can be exploited to bypass security restrictions.
- Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
- Denial of service vulnerability can be exploited remotely to cause denial of service.
オリジナルアドバイザリー
エクスプロイテーション
Public exploits exist for this vulnerability.
関連製品
CVEリスト
- CVE-2024-42516 critical
- CVE-2024-43204 critical
- CVE-2024-43394 critical
- CVE-2024-47252 critical
- CVE-2025-23048 critical
- CVE-2025-49630 critical
- CVE-2025-49812 high
- CVE-2025-53020 critical
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！