Another vulnerability in Apache httpd, allowing access beyond the web root directory.
A new attack vector has been discovered for the Apache HTTP server that remains unpatched in version 2.4.50 and allows access to files in areas outside the site's root directory. Additionally, researchers have found a method that, under certain non-standard configurations, not only allows reading system files but also executing arbitrary code remotely on the server. The issue is only present in releases 2.4.49 […]
