Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Apache HTTP Server: HTTP Response Splitting in multiple modules - CVE-2024-24795 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server: HTTP Response Splitting in multiple modules - CVE-2024-24795

Low
Reference: CVE-2024-24795
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-24795
Title: Apache HTTP Server: HTTP Response Splitting in multiple modules
Overview:

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59 which fixes this issue.