Apache HTTP Server 2.4.49

criticalCVSS 9.8

Path traversal via encoded dots allows reading files outside the document root, and RCE when mod_cgi is enabled.

Dampak

Disclosure of configuration and credential files, or code execution.

Perbaikan

Upgrade to 2.4.51 or later.

Referensi resmi

https://nvd.nist.gov/vuln/detail/CVE-2021-41773

Apakah situs Boss terdampak?

VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2021-41773.

Jalankan audit gratis