PT-2025-24054 · Apache · Apache
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache versions prior to the fixed version
Description
A missing protection against path traversal allows access to any file on the server. This issue affects the Apache software, allowing unauthorized access to files.
Recommendations
For Apache versions prior to the fixed version, update to the latest version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive files on the server until a patch is available.
Fix
Relative Path Traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache