Lucene search

K
broadcomBroadcom Security ResponseBSNSA22346
HistoryAug 01, 2023 - 12:00 a.m.

Apache httpd URL normalization inconsistency

2023-08-0100:00:00
Broadcom Security Response
support.broadcom.com
18

6.1 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes (‘/’), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.

CPENameOperatorVersion
brocade fabric oslt9.0