Lucene search

D10426F3-DF82-5439-AC3E-6CA0A1365A09

HistorySep 15, 2022 - 9:36 a.m.

Exploit for Path Traversal in Apache Http Server

2022-09-1509:36:17

152

apache http server

path traversal

remote code execution

vulnerability

cgi module

exploit

security issue

patch

docker

podman

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.3 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

Apache httpd RCE

A flaw was found in a change made to path no…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

threatpost

Transnational Fraud Ring Bilks U.S. Military Service Members Out of Millions

2021-10-04 15:22:32

Apache Web Server Zero-Day Actively Exploited, Exposes Sensitive Data

2021-10-05 20:01:27

3.1M Neiman Marcus Customer Card Details Breached

2021-10-01 17:50:42

githubexploit

Exploit for Path Traversal in Apache Http Server

2022-03-11 21:50:35

Exploit for Path Traversal in Apache Http Server

2021-10-05 16:18:09

Exploit for Path Traversal in Apache Http Server

2021-10-07 16:19:45

zdt

Apache HTTP Server 2.4.49 - Path Traversal Vulnerability

2021-10-06 00:00:00

Apache HTTP Server 2.4.50 - Remote Code Execution Exploit (3)

2021-11-11 00:00:00

Apache 2.4.49 / 2.4.50 Traversal / Remote Code Execution Exploit

2021-10-26 00:00:00

veracode

Path Traversal

2021-10-06 07:50:10

httpd

Apache Httpd < 2.4.50 : Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

2021-09-29 00:00:00

Apache Httpd < 2.4.51 : Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

2021-10-06 00:00:00

nessus

Apache 2.4.49 < 2.4.51 Path Traversal

2021-10-08 00:00:00

Apache HTTP Server 2.4.49 Path Traversal (CVE-2021-41773)

2021-10-05 00:00:00

Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities

2021-10-05 00:00:00

wallarmlab

Wallarm starts to highlight CVE to address OWASP Top-10 A6 Vulnerable and Outdated Components

2021-10-15 23:13:35

cnvd

Apache HTTP Server path traversal vulnerability

2021-10-08 00:00:00

openvas

Apache HTTP Server 2.4.49 Directory Traversal / RCE Vulnerability - Active Check

2021-10-06 00:00:00

Slackware: Security Advisory (SSA:2021-278-01)

2022-04-21 00:00:00

Slackware: Security Advisory (SSA:2021-280-01)

2022-04-21 00:00:00

cbl_mariner

CVE-2021-41773 affecting package httpd 2.4.49-1

2021-10-15 04:46:31

kitploit

Scarce-Apache2 - A Framework For Bug Hunting Or Pentesting Targeting Websites That Have CVE-2021-41773 Vulnerability In Public

2021-10-29 20:30:00

akamaiblog

Mitigating CVE-2021-41773: Apache HTTP Server Path Traversal

2021-10-07 20:15:00

redhatcve

CVE-2021-41773

2021-10-05 13:27:36

CVE-2021-42013

2021-10-07 17:33:09

packetstorm

Apache HTTP Server 2.4.49 Path Traversal

2021-10-06 00:00:00

Apache 2.4.49 / 2.4.50 Traversal / Remote Code Execution

2021-10-25 00:00:00

Apache HTTP Server 2.4.50 Remote Code Execution

2021-11-11 00:00:00

nuclei

Apache 2.4.49 - Path Traversal and Remote Code Execution

2021-10-05 14:49:36

Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution

2021-10-07 18:17:29

Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution

2021-10-07 18:17:29

exploitdb

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)

2021-10-06 00:00:00

Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (3)

2021-11-11 00:00:00

mageia

Updated apache packages fix security vulnerabilities

2021-10-06 17:38:41

Updated apache packages fix security vulnerability

2021-10-08 22:12:12

fedora

[SECURITY] Fedora 34 Update: httpd-2.4.51-1.fc34

2021-10-12 23:46:03

[SECURITY] Fedora 35 Update: httpd-2.4.51-2.fc35

2021-10-15 00:50:08

prion

Path traversal

2021-10-05 09:15:00

Path traversal

2021-10-07 16:15:00

freebsd

Apache httpd -- Path Traversal and Remote Code Execution

2021-10-07 00:00:00

Apache httpd -- Multiple vulnerabilities

2021-10-05 00:00:00

thn

New Patch Released for Actively Exploited 0-Day Apache Path Traversal to RCE Attacks

2021-10-08 04:47:00

Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!

2021-10-05 14:53:00

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

2024-03-21 12:48:00

nvd

CVE-2021-42013

2021-10-07 16:15:09

CVE-2021-41773

2021-10-05 09:15:07

rapid7blog

Apache HTTP Server CVE-2021-41773 Exploited in the Wild

2021-10-06 16:42:32

alpinelinux

CVE-2021-41773

2021-10-05 09:15:07

CVE-2021-42013

2021-10-07 16:15:09

ubuntucve

CVE-2021-41773

2021-10-05 00:00:00

CVE-2021-42013

2021-10-07 00:00:00

slackware

[slackware-security] httpd

2021-10-08 03:27:06

[slackware-security] httpd

2021-10-06 01:14:05

archlinux

[ASA-202110-1] apache: directory traversal

2021-10-21 00:00:00

impervablog

How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)

2021-10-26 19:35:24

Imperva uncovers new Indicators of Compromise for FBI and CISA-flagged AndroxGh0st botnet

2024-01-31 14:03:45

cisa_kev

Apache HTTP Server Path Traversal Vulnerability

2021-11-03 00:00:00

Apache HTTP Server Path Traversal Vulnerability

2021-11-03 00:00:00

osv

BIT-apache-2021-41773

2024-03-06 10:54:39

BIT-apache-2021-42013

2024-03-06 10:54:27

CVE-2021-42013

2021-10-07 16:15:09

attackerkb

CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

2021-10-08 00:00:00

CVE-2021-41773

2021-10-05 00:00:00

Apache HTTPd 2.4.49/2.4.50 路径穿越漏洞

2021-10-11 00:00:00

qualysblog

Apache HTTP Server Path Traversal & Remote Code Execution (CVE-2021-41773 & CVE-2021-42013)

2021-10-28 06:22:22

hivepro

Multiple vulnerabilities have been discovered in the Apache HTTP Server

2021-10-06 08:57:02

altlinux

Security fix for the ALT Linux 10 package apache2 version 1:2.4.50-alt1

2021-10-07 00:00:00

Security fix for the ALT Linux 9 package apache2 version 1:2.4.50-alt1

2021-10-07 00:00:00

cisa

Apache Releases Security Update for Apache HTTP Server

2021-10-06 00:00:00

Apache Releases HTTP Server version 2.4.51 to Address Vulnerabilities Under Exploitation

2021-10-07 00:00:00

debiancve

CVE-2021-41773

2021-10-05 09:15:07

CVE-2021-42013

2021-10-07 16:15:09

cve

CVE-2021-42013

2021-10-07 16:15:09

CVE-2021-41773

2021-10-05 09:15:07

metasploit

Apache 2.4.49/2.4.50 Traversal RCE scanner

2021-10-06 17:00:59

Apache 2.4.49/2.4.50 Traversal RCE

2021-10-08 11:22:47

checkpoint_advisories

Apache HTTP Server Directory Traversal (CVE-2021-41773; CVE-2021-42013)

2021-10-06 00:00:00

K04082144 : Apache HTTP Server vulnerability CVE-2021-41773, CVE-2021-42013

2021-10-21 00:00:00

jvn

JVN#51106450: Apache HTTP Server vulnerable to directory traversal

2021-10-08 00:00:00

hackerone

Internet Bug Bounty: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013)

2021-11-14 23:54:06

Internet Bug Bounty: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

2021-11-08 21:47:54

kaspersky

KLA12371 Multiple vulnerabilities in Apache HTTP Server

2021-10-04 00:00:00

ibm

Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-42013)

2022-01-17 18:38:24

cvelist

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

2021-10-05 08:40:12

CVE-2021-42013 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

2021-10-07 15:50:14

ics

Known Indicators of Compromise Associated with Androxgh0st Malware

2024-01-16 12:00:00

malwarebytes

[Updated, again] Apache fixes zero-day vulnerability in HTTP Server

2021-10-06 14:23:08

photon

Critical Photon OS Security Update - PHSA-2021-0118

2021-10-19 00:00:00

Critical Photon OS Security Update - PHSA-2021-4.0-0118

2021-10-20 00:00:00

cisco

Apache HTTP Server Vulnerabilities: October 2021

2021-10-07 16:00:00

trellix

The Bug Report – October Edition

2021-11-02 00:00:00

The Bug Report – October Edition

2021-11-02 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.3 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

Exploit for Path Traversal in Apache Http Server

Apache httpd RCE

Related