Exploit / PoCcriticalExploited in the wild

Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!

The Hacker Newsby @TheHackersNewsOct 7, 2021 · 05:31 UTC (Oct 7, 2021)1 min read2 · 2 reads

Read at thehackernews.com

Analyze CVE-2021-41773 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-41773 CVE-2021-41524

Tags: cve-2021-41773 cve-2021-41524 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-41773 +1 related CVE CVE-2021-41524	Path Traversal to RCE in Apache HTTP Server 2.4.49	9.8 group max	100%	KEVRansomwarePoC ×6	Oct 5, 2021 KEV Nov 3, 2021

From the original article

1 min read at thehackernews.com

Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild. "A flaw was found in a change made to path normalization in Apache HTTP Server 2. 4.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.