Apache HTTP Server
Moderate fix1 remedy
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*
Moderate fix1 remedy
- 2.4.64
Apache HTTP Server Rewrite Condition Evaluation Vulnerability
Vulnerability
Patched
A vulnerability in Apache HTTP Server in version 2.4.64 causes all 'RewriteCond expr ...' evaluations to incorrectly assess as 'true'. This flaw can disrupt expected behavior in configurations relying on conditional rewrites, potentially leading to unintended URL processing or access control bypasses. The issue is fixed in version 2.4.65.
Impact
Exploitation of this vulnerability could lead to incorrect URL rewriting, causing access control bypasses or unintended resource exposure.
Remediation
Users are advised to upgrade to Apache HTTP Server version 2.4.65, which addresses this vulnerability.
Added: Jul 23, 2025, 2:17 PM
Updated: Jul 23, 2025, 2:17 PM
Vulnerability Rating
Custom Algorithm
spread
9.4impact
2.5exploitability
7.6remediation
7.7relevance
0.3threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.