CVE-2021-41773highbajo ataqueransomwareCWE-22

CVE-2021-41773: fallo de gravedad alta en Apache HTTP Server

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Apache HTTP Server+ Monitorear apache2

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 7.5epss 100%
de la publicación al armael mismo día
Publicada en NVD5 oct
1ª PoC5 oct
metasploit10 may
CISA KEV+29d
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
No afectado
7 productos (59 componentes) — porque el código vulnerable no está presente en el producto
Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9 · Red Hat Software Collections · Red Hat Enterprise Linux 7 · Red Hat JBoss Enterprise Application Platform 6 · y otros 2
Acción exigida por CISAplazo federal: 2021-11-17

Apply updates per vendor instructions.

En resumen

Apache HTTP Server 2.4.49 tiene un defecto en cómo procesa las rutas de archivos, permitiendo que los atacantes accedan a archivos fuera de los directorios previstos mediante URLs especialmente construidas. Si esos archivos no están adecuadamente protegidos, los atacantes pueden leer datos sensibles o ejecutar código malicioso si los scripts CGI están habilitados.

Detalle técnico

Un bypase de normalización de rutas en Apache 2.4.49 permite ataques de path traversal para mapear URLs a archivos fuera del alcance de directivas tipo Alias. La vulnerabilidad requiere que archivos fuera de directorios configurados carezcan de protecciones predeterminadas "require all denied"; la explotación puede conducir a divulgación de información o RCE si se permite ejecución CGI en rutas con alias. Afecta solo a la versión 2.4.49 y es explotada activamente en la práctica.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Apache Software Foundation · Apache HTTP Server
PoCs públicas encontradas — 322✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/50383exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/50512githubgithub.com/blasty/CVE-2021-41773★ 211githubgithub.com/inbug-team/CVE-2021-41773_CVE-2021-42013★ 147githubgithub.com/thehackersbrain/CVE-2021-41773★ 113githubgithub.com/HightechSec/scarce-apache2★ 62githubgithub.com/MrCl0wnLab/SimplesApachePathTraversal★ 61githubgithub.com/iilegacyyii/PoC-CVE-2021-41773★ 52githubgithub.com/lorddemon/CVE-2021-41773-PoC★ 39githubgithub.com/Vulnmachines/cve-2021-41773★ 38githubgithub.com/justakazh/mass_cve-2021-41773★ 29githubgithub.com/im-hanzou/apachrot★ 23githubgithub.com/BlueTeamSteve/CVE-2021-41773★ 23githubgithub.com/Ls4ss/CVE-2021-41773_CVE-2021-42013★ 20githubgithub.com/ZephrFish/CVE-2021-41773-PoC★ 17githubgithub.com/wangfly-me/Apache_Penetration_Tool★ 14githubgithub.com/blackn0te/Apache-HTTP-Server-2.4.49-2.4.50-Path-Traversal-Remote-Code-Execution★ 13githubgithub.com/j4k0m/CVE-2021-41773★ 13githubgithub.com/mr-exo/CVE-2021-41773★ 12githubgithub.com/itsecurityco/CVE-2021-41773★ 12githubgithub.com/Zeop-CyberSec/apache_normalize_path★ 11githubgithub.com/zeronine9/CVE-2021-41773★ 10githubgithub.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit★ 10githubgithub.com/1nhann/CVE-2021-41773★ 9githubgithub.com/theLSA/apache-httpd-path-traversal-checker★ 9githubgithub.com/knqyf263/CVE-2021-41773★ 9githubgithub.com/aqiao-jashell/CVE-2021-41773★ 9githubgithub.com/creadpag/CVE-2021-41773-POC★ 8githubgithub.com/numanturle/CVE-2021-41773★ 8githubgithub.com/aqiao-jashell/py-CVE-2021-41773★ 7githubgithub.com/0xRar/CVE-2021-41773★ 7githubgithub.com/Hydragyrum/CVE-2021-41773-Playground★ 6githubgithub.com/TishcaTpx/POC-CVE-2021-41773★ 6githubgithub.com/noflowpls/CVE-2021-41773★ 6githubgithub.com/LudovicPatho/CVE-2021-41773★ 5githubgithub.com/RevShellXD/LFI-Destruction★ 4githubgithub.com/jbovet/CVE-2021-41773★ 4githubgithub.com/apapedulimu/Apachuk★ 4githubgithub.com/OfriOuzan/CVE-2021-41773_CVE-2021-42013_Exploits★ 4githubgithub.com/twseptian/cve-2021-41773★ 4githubgithub.com/habibiefaried/CVE-2021-41773-PoC★ 3githubgithub.com/superzerosec/CVE-2021-41773★ 3githubgithub.com/jheeree/Simple-CVE-2021-41773-checker★ 2githubgithub.com/Chocapikk/CVE-2021-41773★ 2githubgithub.com/iosifache/ApacheRCEEssay★ 2githubgithub.com/lopqto/CVE-2021-41773_Honeypot★ 2githubgithub.com/Habib0x0/CVE-2021-41773★ 2githubgithub.com/Zyx2440/Apache-HTTP-Server-2.4.50-RCE★ 2githubgithub.com/orangmuda/CVE-2021-41773★ 2githubgithub.com/CyberQuestor-infosec/CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE★ 2githubgithub.com/walnutsecurity/cve-2021-41773★ 2githubgithub.com/Soliux/CVE-2021-41773★ 2githubgithub.com/5gstudent/cve-2021-41773-and-cve-2021-42013★ 2githubgithub.com/Kouf320/docker-lab-cve-2017-5638-cve-2021-41773★ 2githubgithub.com/MazX0p/CVE-2021-41773★ 2githubgithub.com/im2sinister/CVE-2021-41773★ 1githubgithub.com/PentesterGuruji/CVE-2021-41773★ 1githubgithub.com/charanvoonna/CVE-2021-41773★ 1githubgithub.com/mightysai1997/CVE-2021-41773m★ 1githubgithub.com/ashique-thaha/CVE-2021-41773-POC★ 1githubgithub.com/r00tVen0m/CVE-2021-41773★ 1githubgithub.com/dishantsehgal/CVE-2021-41773★ 1githubgithub.com/IcmpOff/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution-Exploit★ 1githubgithub.com/mightysai1997/CVE-2021-41773S★ 1githubgithub.com/vinhjaxt/CVE-2021-41773-exploit★ 1githubgithub.com/gagaltotal/CVE-2021-41773-apache★ 1githubgithub.com/AssassinUKG/CVE-2021-41773★ 1githubgithub.com/ksanchezcld/httpd-2.4.49★ 1githubgithub.com/zerodaywolf/CVE-2021-41773_42013★ 1githubgithub.com/kubota/POC-CVE-2021-41773★ 1githubgithub.com/n3k00n3/CVE-2021-41773★ 1githubgithub.com/shellreaper/CVE-2021-41773★ 1githubgithub.com/corelight/CVE-2021-41773★ 1githubgithub.com/retrymp3/apache2.4.49VulnerableLabSetup★ 1githubgithub.com/adrianmafandy/CVE-2021-41773★ 1githubgithub.com/TheKernelPanic/exploit-apache2-cve-2021-41773★ 1githubgithub.com/masahiro331/CVE-2021-41773★ 1githubgithub.com/EagleTube/CVE-2021-41773★ 1githubgithub.com/mauricelambert/CVE-2021-41773★ 1githubgithub.com/psibot/apache-vulnerable★ 1githubgithub.com/Iris288/CVE-2021-41773★ 1githubgithub.com/klmntbelgium/cve-2021-41773-exploration★ 1githubgithub.com/lucastran05/CVE-2021-41773★ 0githubgithub.com/mightysai1997/CVE-2021-41773h★ 0githubgithub.com/lheeeesoo/Apache-CVE-2021-41773★ 0githubgithub.com/ninthsgrsj-source/vulhub-apache★ 0githubgithub.com/DappaNISM/mass_cve-2021-41773★ 0githubgithub.com/tr3m0x/CVE-2021-41773★ 0githubgithub.com/s-amnajafri/CVE-2021-41773-Apache-Lab★ 0githubgithub.com/shiomiyan/CVE-2021-41773★ 0githubgithub.com/fnatalucci/CVE-2021-41773-RCE★ 0githubgithub.com/DoTuan1/Reserch-CVE-2021-41773★ 0githubgithub.com/mightysai1997/CVE-2021-41773-L-★ 0githubgithub.com/mightysai1997/CVE-2021-41773-PoC★ 0githubgithub.com/Maybe4a6f7365/CVE-2021-41773★ 0githubgithub.com/fxdyx-a/CVE-2021-41773-POC★ 0githubgithub.com/Park123r/CVE-2021-41773★ 0githubgithub.com/KunalKhandelwal-dev/cve-2021-41773-lab★ 0githubgithub.com/Emaar1x/CVE-2021-41773★ 0githubgithub.com/TheoCerveraLede/practica-integradora-ciberseguridad★ 0githubgithub.com/i6c/MASS_CVE-2021-41773★ 0githubgithub.com/dileepdkumar/LayarKacaSiber-CVE-2021-41773★ 0githubgithub.com/pisut4152/Sigma-Rule-for-CVE-2021-41773-and-CVE-2021-42013-exploitation-attempt★ 0githubgithub.com/LayarKacaSiber/CVE-2021-41773★ 0githubgithub.com/Shams-Ul-Mehmood/CVE-2021-41773-Exploit★ 0githubgithub.com/AlaIchhe/hdu-is-work1-secure-api★ 0githubgithub.com/twq0316/work1-secure-rest-api★ 0githubgithub.com/foreverlanterns/secure-demo-api★ 0githubgithub.com/mightysai1997/cve-2021-41773★ 0githubgithub.com/mightysai1997/CVE-2021-41773-i-★ 0githubgithub.com/mightysai1997/CVE-2021-41773.git1★ 0githubgithub.com/ChanaPCN/CVE-2021-41773-Analysis★ 0githubgithub.com/sobanahmed6061/CVE-2021-41773-RedTeam★ 0githubgithub.com/KunalKhandelwal-dev/cve-2021-41773-source-code-analysis★ 0githubgithub.com/SANR01/CVE-2021-41773-Exploit-Lab★ 0githubgithub.com/abdulrafay25-svg/CVE-2021-41773-Exploit★ 0githubgithub.com/1833ravikumar-max/CVE-2021-41773-Apache-Path-Traversal-Lab★ 0githubgithub.com/b1tsec/CVE-2021-41773★ 0githubgithub.com/ch4os443/CVE-2021-41773★ 0githubgithub.com/pirenga/CVE-2021-41773★ 0githubgithub.com/xMohamed0/CVE-2021-41773★ 0githubgithub.com/norrig/CVE-2021-41773-exploiter★ 0githubgithub.com/javaamo/CVE-2021-41773★ 0githubgithub.com/AzkOsDev/CVE-2021-41773★ 0githubgithub.com/blu3ming/PoC-CVE-2021-41773★ 0githubgithub.com/faizdotid/CVE-2021-41773★ 0githubgithub.com/pwn3z/CVE-2021-41773-Apache-RCE★ 0githubgithub.com/mah4nzfr/CVE-2021-41773★ 0githubgithub.com/Nanxsec/exploitApache★ 0githubgithub.com/GlebUsalt/cybersecurity_portfolio★ 0githubgithub.com/CyberCTF/vulhub-httpd-cve-2021-41773★ 0githubgithub.com/Joapath/CVE-2021-41773★ 0githubgithub.com/vida003/Scanner-CVE-2021-41773★ 0githubgithub.com/TAI-REx/cve-2021-41773-nse★ 0githubgithub.com/mohwahyudi/cve-2021-41773★ 0githubgithub.com/ranggaggngntt/CVE-2021-41773★ 0githubgithub.com/twseptian/cve-2021-41773-docker-lab★ 0githubgithub.com/BabyTeam1024/CVE-2021-41773★ 0githubgithub.com/m96dg/CVE-2021-41773-exercise★ 0githubgithub.com/Fa1c0n35/CVE-2021-41773★ 0githubgithub.com/puckiestyle/CVE-2021-41773★ 0githubgithub.com/zer0qs/CVE-2021-41773★ 0githubgithub.com/jkska23/Additive-Vulnerability-Analysis-CVE-2021-41773★ 0githubgithub.com/MuhammadHuzaifaAsif/security-lab★ 0githubgithub.com/Mahfujurjust/CVE-2021-41773★ 0githubgithub.com/wolf1892/CVE-2021-41773★ 0githubgithub.com/EkamSinghWalia/Mitigation-Apache-CVE-2021-41773-★ 0githubgithub.com/JKIM72403/CS4277-CVE-Path-Traversal-Apache-HTTP-Server★ 0githubgithub.com/johnwickakash12/CVE-2021-41773★ 0githubgithub.com/0xrogg/CVE-2021-41773★ 0githubgithub.com/mightysai1997/cve-2021-41773-v-★ 0githubgithub.com/bernardas/netsec-polygon★ 0githubgithub.com/a24ac1/CVE-2021-41773-PoC★ 0githubgithub.com/manfredgabriel/cve-2021-41773-lab★ 0githubgithub.com/MatanelGordon/docker-cve-2021-41773★ 0githubgithub.com/0xGabe/Apache-CVEs★ 0githubgithub.com/Hattan515/POC-CVE-2021-41773★ 0githubgithub.com/vuongnv3389-sec/cve-2021-41773★ 0githubgithub.com/anldori/CVE-2021-41773-Scanner★ 0githubgithub.com/sudo0xksh/cve-2021-41773-checker★ 0githubgithub.com/ISabbiI/PoC-Apache-CVE-2021-41773-Infrastructure-LAB★ 0githubgithub.com/zubairahm3d/apache-cve-2021-41773-lab★ 0githubgithub.com/0xc4t/CVE-2021-41773★ 0githubgithub.com/sixpacksecurity/CVE-2021-41773★ 0githubgithub.com/sotiak/CVE-2021-41773★ 0githubgithub.com/TheLastVvV/CVE-2021-41773★ 0githubgithub.com/skentagon/CVE-2021-41773★ 0githubgithub.com/12345qwert123456/CVE-2021-41773★ 0githubgithub.com/Taldrid1/cve-2021-41773★ 0githubgithub.com/Vanshuk-Bhagat/Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013★ 0githubgithub.com/JIYUN02/cve-2021-41773★ 0githubgithub.com/hackedrishi/CTF_WRITEUPS-TryHackMe-CVE-2021-41773-★ 0githubgithub.com/Areeba-Zehra-Jafri/CVE-2021-41773---Apache-Path-Traversal---RCE★ 0githubgithub.com/redspy-sec/CVE-2021-41773★ 0githubgithub.com/luongchivi/Preproduce-CVE-2021-41773★ 0githubgithub.com/FakesiteSecurity/CVE-2021-41773★ 0githubgithub.com/tiemio/SSH-key-and-RCE-PoC-for-CVE-2021-41773★ 0githubgithub.com/khaidtraivch/CVE-2021-41773-Apache-2.4.49-★ 0githubgithub.com/r0otk3r/CVE-2021-41773★ 0githubgithub.com/gunzf0x/CVE-2021-41773★ 0githubgithub.com/dserdyk3-arch/Serdyuk-DO-homework-CVE-2021-41773★ 0githubgithub.com/tsiddiquea/cve-reproduction-lab★ 0githubgithub.com/abds059/APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-★ 0vulncheckvulncheck.com/xdb/ad95468b6ce6no verificadovulncheckvulncheck.com/xdb/b2c3942111cdno verificadocve_referencepacketstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.htmlno verificadocve_referencepacketstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/cbe25fa48d0dno verificadovulncheckvulncheck.com/xdb/0976b89c3c3dno verificadovulncheckvulncheck.com/xdb/96d5bed04848no verificadovulncheckvulncheck.com/xdb/27785a0f96dano verificadovulncheckvulncheck.com/xdb/627dc95e5bccno verificadovulncheckvulncheck.com/xdb/96beef7afe5dno verificadovulncheckvulncheck.com/xdb/e19320c6dfdfno verificadovulncheckvulncheck.com/xdb/7103e5467b82no verificadovulncheckvulncheck.com/xdb/cf85846f28f8no verificadovulncheckvulncheck.com/xdb/517b313ad171no verificadovulncheckvulncheck.com/xdb/c11912a36049no verificadovulncheckvulncheck.com/xdb/85405dbfd027no verificadovulncheckvulncheck.com/xdb/4641bb9539f4no verificadovulncheckvulncheck.com/xdb/8867c4e1c307no verificadovulncheckvulncheck.com/xdb/a4cf0cfa21f6no verificadovulncheckvulncheck.com/xdb/5cb3eb657c95no verificadovulncheckvulncheck.com/xdb/4aeca6685d2bno verificadovulncheckvulncheck.com/xdb/c32e5f532570no verificadovulncheckvulncheck.com/xdb/bce26bf9a7dbno verificadovulncheckvulncheck.com/xdb/f0e7324b9b25no verificadovulncheckvulncheck.com/xdb/bb58b7001b1fno verificadovulncheckvulncheck.com/xdb/90b14fb65ee8no verificadovulncheckvulncheck.com/xdb/d0086a5bdeecno verificadovulncheckvulncheck.com/xdb/25c6171f0d20no verificadovulncheckvulncheck.com/xdb/5876e9463bbdno verificadovulncheckvulncheck.com/xdb/c46ab2084dd8no verificadovulncheckvulncheck.com/xdb/8818ad910e2fno verificadovulncheckvulncheck.com/xdb/a6c3bff27ae4no verificadovulncheckvulncheck.com/xdb/846a361d532ano verificadovulncheckvulncheck.com/xdb/d0972a06aceeno verificadovulncheckvulncheck.com/xdb/37f7e7cf267dno verificadovulncheckvulncheck.com/xdb/91cf2dd89533no verificadovulncheckvulncheck.com/xdb/7f7042705dd4no verificadovulncheckvulncheck.com/xdb/af8ec6c8371fno verificadovulncheckvulncheck.com/xdb/116dd0497f92no verificadovulncheckvulncheck.com/xdb/56fc1e32325ano verificadovulncheckvulncheck.com/xdb/58a64b19ebbbno verificadovulncheckvulncheck.com/xdb/80eefccf1e05no verificadovulncheckvulncheck.com/xdb/54be1024b6bcno verificadovulncheckvulncheck.com/xdb/19daa216be3eno verificadovulncheckvulncheck.com/xdb/93df6b255322no verificadovulncheckvulncheck.com/xdb/151bc6d65f04no verificadovulncheckvulncheck.com/xdb/24d12a4a7fc7no verificadovulncheckvulncheck.com/xdb/772d5bced9bano verificadovulncheckvulncheck.com/xdb/7f994d193496no verificadovulncheckvulncheck.com/xdb/f8b4bb1e6c3eno verificadovulncheckvulncheck.com/xdb/b8ddde495298no verificadovulncheckvulncheck.com/xdb/dde0bdc0bae9no verificadovulncheckvulncheck.com/xdb/0542adb90818no verificadovulncheckvulncheck.com/xdb/416f536ef47fno verificadovulncheckvulncheck.com/xdb/79a7215a4e02no verificadovulncheckvulncheck.com/xdb/46ab91ec1d98no verificadovulncheckvulncheck.com/xdb/27f2d798eb4eno verificadovulncheckvulncheck.com/xdb/0876a430eb18no verificadovulncheckvulncheck.com/xdb/c454ef5641d0no verificadovulncheckvulncheck.com/xdb/f7be65b2ebfcno verificadovulncheckvulncheck.com/xdb/91738f2d976dno verificadovulncheckvulncheck.com/xdb/b176f463fd70no verificadovulncheckvulncheck.com/xdb/a5f2ac9f054bno verificadovulncheckvulncheck.com/xdb/42e9c7e067d3no verificadovulncheckvulncheck.com/xdb/c3290a9c4bc7no verificadovulncheckvulncheck.com/xdb/c7958f390e0cno verificadovulncheckvulncheck.com/xdb/78d9ef784392no verificadovulncheckvulncheck.com/xdb/1c63893823c9no verificadovulncheckvulncheck.com/xdb/ff16564070fano verificadovulncheckvulncheck.com/xdb/809430868585no verificadovulncheckvulncheck.com/xdb/a64e3f6930dbno verificadovulncheckvulncheck.com/xdb/5e909ea4a3d5no verificadovulncheckvulncheck.com/xdb/01d74e61f225no verificadovulncheckvulncheck.com/xdb/6cf46a065e42no verificadovulncheckvulncheck.com/xdb/e53c96b7f8c4no verificadovulncheckvulncheck.com/xdb/80d7b284f950no verificadovulncheckvulncheck.com/xdb/e476521c9afano verificadovulncheckvulncheck.com/xdb/f9ab3269f3b5no verificadovulncheckvulncheck.com/xdb/3bbc73bf5a53no verificadovulncheckvulncheck.com/xdb/7cb588641bcfno verificadovulncheckvulncheck.com/xdb/7efd496306c2no verificadovulncheckvulncheck.com/xdb/4e2e5e6c7181no verificadovulncheckvulncheck.com/xdb/8c3d9bc94733no verificadovulncheckvulncheck.com/xdb/5283f9042bf8no verificadovulncheckvulncheck.com/xdb/0c20fdde6dd8no verificadovulncheckvulncheck.com/xdb/d98a494ae032no verificadovulncheckvulncheck.com/xdb/3211ee9a55c9no verificadovulncheckvulncheck.com/xdb/044ea91b2193no verificadovulncheckvulncheck.com/xdb/94a06b6dd90bno verificadovulncheckvulncheck.com/xdb/b598961f144eno verificadovulncheckvulncheck.com/xdb/96f1c731b1dcno verificadovulncheckvulncheck.com/xdb/85f36fa22d39no verificadovulncheckvulncheck.com/xdb/437a25cb8921no verificadovulncheckvulncheck.com/xdb/bbac342031d6no verificadovulncheckvulncheck.com/xdb/9ad5719d7456no verificadovulncheckvulncheck.com/xdb/457181fde0f1no verificadovulncheckvulncheck.com/xdb/7afffb26edd4no verificadovulncheckvulncheck.com/xdb/855d9c6baf99no verificadovulncheckvulncheck.com/xdb/6b2706ed8ec1no verificadovulncheckvulncheck.com/xdb/008e85dbc1c9no verificadovulncheckvulncheck.com/xdb/b2fa73957f01no verificadovulncheckvulncheck.com/xdb/e85f727e727bno verificadovulncheckvulncheck.com/xdb/681e0d01e5dano verificadovulncheckvulncheck.com/xdb/5af378bf509dno verificadovulncheckvulncheck.com/xdb/627db9fc55b0no verificadovulncheckvulncheck.com/xdb/da37165ee257no verificadovulncheckvulncheck.com/xdb/3eaab97d8af5no verificadovulncheckvulncheck.com/xdb/aae37aecb1f9no verificadovulncheckvulncheck.com/xdb/d0fe9d9a553dno verificadovulncheckvulncheck.com/xdb/c51602d229c6no verificadovulncheckvulncheck.com/xdb/be895a0787adno verificadovulncheckvulncheck.com/xdb/5799570f2f27no verificadovulncheckvulncheck.com/xdb/e182f521f4e7no verificadovulncheckvulncheck.com/xdb/3a3bdf3a84bcno verificadovulncheckvulncheck.com/xdb/e205251db10fno verificadovulncheckvulncheck.com/xdb/917821cc2907no verificadovulncheckvulncheck.com/xdb/034bd4ba0feano verificadovulncheckvulncheck.com/xdb/caf67abf11c9no verificadovulncheckvulncheck.com/xdb/8dbe937e8bb7no verificadovulncheckvulncheck.com/xdb/24cd7610fe00no verificadocve_referencepacketstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/872dc0e8ee0fno verificadovulncheckvulncheck.com/xdb/e1b13964371eno verificadocve_referencepacketstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal.htmlno verificadovulncheckvulncheck.com/xdb/e82e257a538dno verificadovulncheckvulncheck.com/xdb/b67a7d548611no verificadovulncheckvulncheck.com/xdb/0b82cee2ba55no verificadovulncheckvulncheck.com/xdb/d6d53cfb16f3no verificadovulncheckvulncheck.com/xdb/a66169a7c75dno verificadovulncheckvulncheck.com/xdb/ee71ed2f270bno verificadovulncheckvulncheck.com/xdb/690002438dc4no verificadovulncheckvulncheck.com/xdb/9abe2b083f0fno verificadovulncheckvulncheck.com/xdb/0378d8d19cf3no verificadovulncheckvulncheck.com/xdb/0ac26a2dedcfno verificadovulncheckvulncheck.com/xdb/fffb15444fe5no verificadovulncheckvulncheck.com/xdb/e100498666eeno verificadovulncheckvulncheck.com/xdb/4b710819ab5bno verificadovulncheckvulncheck.com/xdb/539a104ed34fno verificadovulncheckvulncheck.com/xdb/03244a564268no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Apache HTTP Server

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-40438CRITICALmod_proxy SSRFEPSS 100.0%KEVCVE-2021-42013CRITICALPath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)EPSS 100.0%KEVCVE-2024-38475CRITICALApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.EPSS 100.0%KEVCVE-2021-44790—Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierEPSS 96.8%CVE-2017-9798—CVE-2017-9798EPSS 94.7%CVE-2022-30522—mod_sed denial of serviceEPSS 89.9%