Security Alert (A23-10-20): Multiple Vulnerabilities in Apache HTTP Server
20 October 2023
The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules. A remote attacker could exploit the vulnerabilities by sending a specially crafted request to the affected systems.
Apache HTTP Server prior to version 2.4.58
Successful exploitation of the vulnerabilities could lead to denial of service or information disclosure on an affected system.
The Apache Software Foundation has released new version of the product to address the issues and they can be downloaded at the following URL: https://httpd.apache.org/download.cgi#apache24