Apache HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apache HTTP Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.

Note:

CVE-2024-38475 is being exploited in the wild. This vulnerability allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Hence, the risk level is rated as High Risk.

[Updated on 2025-05-02] 

Updated Description, Risk Level and Related Links.