mod_proxy_ajp: Possible request smuggling

A flaw in Apache HTTP Server's mod_proxy_ajp module allows attackers to send hidden requests to backend AJP servers by exploiting how the module interprets HTTP requests differently than intended. This can lead to unauthorized actions or data exposure on the backend server.

HTTP Request Smuggling vulnerability in mod_proxy_ajp exploits inconsistent interpretation of HTTP requests between the Apache proxy and the AJP backend server. An attacker can craft malicious HTTP requests that are parsed differently by the proxy and backend, allowing request smuggling to execute unintended commands on the AJP server. Affects Apache HTTP Server 2.4.53 and earlier versions.