Lucene search
K

5 matches found

Nuclei
Nuclei
added 2026/06/16 7:13 a.m.78 views

Sonicwall - Pre-Authentication Arbitrary File Read

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

9.1CVSS8.7AI score0.99957EPSS
Exploits1
Hacker One
Hacker One
added 2024/07/03 7:9 a.m.114 views

Internet Bug Bounty: important: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. (CVE-2024-38475)

The Apache HTTP Server was found to have a vulnerability in modrewrite where improper escaping of output allowed attackers to map URLs to filesystem locations that were permitted to be served by the server but were not intentionally/directly reachable by any URL. This resulted in potential code...

9.1CVSS9.1AI score0.99957EPSS
Exploits1
OSV
OSV
added 2024/07/01 7:15 p.m.165 views

CVE-2024-38475

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

9.1CVSS7AI score0.99957EPSS
Exploits1References7
OSV
OSV
added 2024/07/01 7:15 p.m.5 views

DEBIAN-CVE-2024-38475

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

9.1CVSS9.2AI score0.99957EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2024/07/01 7:15 p.m.50 views

CVE-2024-38475

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

9.1CVSS7.5AI score0.99957EPSS
Exploits1References7
Rows per page
Query Builder