https://pwn.watch/i/apache-http-server-cve-2024-38475 Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Added to CISA KEV on 2025-05-01. en Thu, 01 May 2025 00:00:00 GMT https://pwn.watch/i/apache-http-server-cve-2024-38475 https://pwn.watch/i/apache-http-server-cve-2024-38475#2025-05-01-187155e5 Thu, 01 May 2025 00:00:00 GMT critical <p>Apache HTTP Server: HTTP Server Improper Escaping of Output Vulnerability: CISA added CVE-2024-38475 to the KEV catalog (due 2025-05-22).</p>