PT-2021-3578
CVE-2021-30641
·
تاريخ النشر
2021-04-14
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Apache HTTP Server versions 2.4.39 through 2.4.46
Description
The issue exists due to insufficient input validation in the Apache HTTP Server. Exploitation of this issue may allow a remote attacker to impact the integrity of protected information. The problem is related to unexpected matching behavior when 'MergeSlashes OFF' is set.
Recommendations
For Apache HTTP Server versions 2.4.39 through 2.4.46, update to a version that fixes the unexpected matching behavior with 'MergeSlashes OFF'.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾