Release of the Apache HTTP Server 2.4.53 addressing critical vulnerabilities
The HTTP Server Apache 2.4.53 has been released, featuring 14 changes and addressing 4 vulnerabilities: CVE-2022-22720 — a potential HTTP Request Smuggling attack that allows specially crafted client requests to be injected into the content of requests from other users, transmitted via mod_proxy (for example, this can enable the injection of malicious JavaScript code into the session of another user on the site). The issue is caused by leaving incoming connections open […]
