CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-10-07
Apache HTTP Server Path Traversal and Remote Code Execution (RCE) Vulnerability Advisory (CVE-2021-42013)
[Affected Scope] Apache HTTP Server versions 2.4.49 and 2.4.50
[Impact] Unauthenticated remote attackers can exploit this vulnerability to access sensitive files outside the document root or execute arbitrary commands if CGI scripts are enabled
[Mitigation] Immediately upgrade Apache HTTP Server to version 2.4.51 or later, and enforce strict directory access controls