4 ms·
do they all depends on rewrite engine (.*) $1, or i missed one that doesn't?
by 1oooqooq 2y ago
do they all depends on rewrite engine (.*) $1, or i missed one that doesn't?
- idoubtit 2y agoSome attacks did not rely on mod_rewrite. For instance, the splitting of response headers. The Apache vulnerabilities list provides a short summary of each: https://httpd.apache.org/security/vulnerabilities_24.html https://httpd.apache.org/security/vulnerabilities_24.html The fixes are in versions 2.4.59 and 2.4.60. Then a fix of the fix of CVE-2024-39884 in 2.4.61. Then a better fix of CVE-2024-39884 in 2.4.62.