Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Apache HTTP Server Improper Neutralization of Escape Meta or Control Sequences Vulnerability - CVE-2025-65082 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Improper Neutralization of Escape Meta or Control Sequences Vulnerability - CVE-2025-65082

Medium
Reference: CVE-2025-65082
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-65082
Title: Apache HTTP Server Improper Neutralization of Escape Meta or Control Sequences Vulnerability
Overview:

Improper Neutralization of Escape Meta or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.