http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.html

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal.html

http://packetstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.html

http://packetstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html

http://www.openwall.com/lists/oss-security/2021/10/05/2

http://www.openwall.com/lists/oss-security/2021/10/07/1

http://www.openwall.com/lists/oss-security/2021/10/07/6

http://www.openwall.com/lists/oss-security/2021/10/08/1

http://www.openwall.com/lists/oss-security/2021/10/08/2

http://www.openwall.com/lists/oss-security/2021/10/08/3

http://www.openwall.com/lists/oss-security/2021/10/08/4

http://www.openwall.com/lists/oss-security/2021/10/08/5

http://www.openwall.com/lists/oss-security/2021/10/08/6

http://www.openwall.com/lists/oss-security/2021/10/09/1

http://www.openwall.com/lists/oss-security/2021/10/11/4

http://www.openwall.com/lists/oss-security/2021/10/15/3

http://www.openwall.com/lists/oss-security/2021/10/16/1

https://httpd.apache.org/security/vulnerabilities_24.html

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3%40%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f%40%3Cusers.httpd.apache.org%3E

https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb%40%3Cusers.httpd.apache.org%3E

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/

https://security.gentoo.org/glsa/202208-20

https://security.netapp.com/advisory/ntap-20211029-0009/

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ

https://www.oracle.com/security-alerts/cpujan2022.html

https://httpd.apache.org/security/vulnerabilities_24.html Vendor Advisory

https://httpd.apache.org/security/vulnerabilities_24.html Release Notes, Vendor Advisory

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3%40%3Ccvs.httpd.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3%40%3Ccvs.httpd.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f%40%3Cusers.httpd.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f%40%3Cusers.httpd.apache.org%3E Mailing List

https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837%40%3Cannounce.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837%40%3Cannounce.apache.org%3E Mailing List

https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45%40%3Cannounce.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45%40%3Cannounce.apache.org%3E Mailing List

https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb%40%3Cusers.httpd.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb%40%3Cusers.httpd.apache.org%3E Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ Release Notes

Apache Software Foundation https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3%40%3Ccvs.httpd.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f%40%3Cusers.httpd.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837%40%3Cannounce.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45%40%3Cannounce.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb%40%3Cusers.httpd.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3@%3Ccvs.httpd.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f@%3Cusers.httpd.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837@%3Cannounce.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45@%3Cannounce.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb@%3Cusers.httpd.apache.org%3E

Apache Software Foundation https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/

Apache Software Foundation https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/

https://security.gentoo.org/glsa/202208-20 No Types Assigned

https://security.gentoo.org/glsa/202208-20 Third Party Advisory

https://security.gentoo.org/glsa/202208-20 [No Types Assigned]

OR
     *cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*

https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html [No Types Assigned]

OR
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.html Exploit, Third Party Advisory

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry

http://packetstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry

http://packetstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry

http://www.openwall.com/lists/oss-security/2021/10/07/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/07/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/07/6 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/07/6 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/1 Exploit, Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/2 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/3 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/3 Exploit, Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/4 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/4 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/5 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/5 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/6 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/6 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/09/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/09/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/11/4 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/11/4 Mailing List, Patch, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/15/3 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/15/3 Mailing List, Patch, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/16/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/16/1 Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3@%3Ccvs.httpd.apache.org%3E Mailing List, Vendor Advisory

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3@%3Ccvs.httpd.apache.org%3E Mailing List, Patch, Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ Mailing List, Third Party Advisory

https://security.netapp.com/advisory/ntap-20211029-0009/ No Types Assigned

https://security.netapp.com/advisory/ntap-20211029-0009/ Third Party Advisory

http://packetstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html [No Types Assigned]

https://security.netapp.com/advisory/ntap-20211029-0009/ [No Types Assigned]

http://packetstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.html [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/16/1 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/15/3 [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NIST (AV:N/AC:M/Au:N/C:P/I:N/A:N)

NIST CWE-22

OR
     *cpe:2.3:a:apache:http_server:2.4.49:*:*:*:*:*:*:*

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.html Exploit, Third Party Advisory

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal.html No Types Assigned

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal.html Exploit, Third Party Advisory, VDB Entry

http://www.openwall.com/lists/oss-security/2021/10/05/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/05/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/07/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/07/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/07/6 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/07/6 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/08/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/08/2 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/3 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/08/3 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/4 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/08/4 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/5 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/08/5 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/08/6 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/08/6 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/09/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/09/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/11/4 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/11/4 Third Party Advisory

https://httpd.apache.org/security/vulnerabilities_24.html No Types Assigned

https://httpd.apache.org/security/vulnerabilities_24.html Vendor Advisory

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3@%3Ccvs.httpd.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3@%3Ccvs.httpd.apache.org%3E Mailing List, Vendor Advisory

https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f@%3Cusers.httpd.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f@%3Cusers.httpd.apache.org%3E Mailing List, Vendor Advisory

https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837@%3Cannounce.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837@%3Cannounce.apache.org%3E Mailing List, Vendor Advisory

https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45@%3Cannounce.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45@%3Cannounce.apache.org%3E Mailing List, Vendor Advisory

https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb@%3Cusers.httpd.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb@%3Cusers.httpd.apache.org%3E Mailing List, Vendor Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ No Types Assigned

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/11/4 [No Types Assigned]

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document root. If files outside of the document root are not protected by "require all denied" these requests can succeed. Additionally this flaw could leak the source of interpreted files like CGI scripts. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions.

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the 

http://www.openwall.com/lists/oss-security/2021/10/08/5 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/08/6 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/09/1 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/08/3 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/08/4 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/08/2 [No Types Assigned]

https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3@%3Ccvs.httpd.apache.org%3E [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/08/1 [No Types Assigned]

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/07/6 [No Types Assigned]

https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837@%3Cannounce.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb@%3Cusers.httpd.apache.org%3E [No Types Assigned]

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal-Remote-Code-Execution.html [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/07/1 [No Types Assigned]

http://packetstormsecurity.com/files/164418/Apache-HTTP-Server-2.4.49-Path-Traversal.html [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/05/2 [No Types Assigned]

https://lists.apache.org/thread.html/r98d704ed4377ed889d40479db79ed1ee2f43b2ebdd79ce84b042df45@%3Cannounce.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r6abf5f2ba6f1aa8b1030f95367aaf17660c4e4c78cb2338aee18982f@%3Cusers.httpd.apache.org%3E [No Types Assigned]