Apache HTTP Server mod_dav_fs Protected Directory Access Vulnerability

A path handling vulnerability has been identified in the mod_dav_fs module of Apache HTTP Server versions through 2.4.67. This vulnerability allows WebDAV content authors to directly manipulate trusted DAV property databases, which could lead to crashes in child processes. The issue arises from improper handling of paths, enabling potential disruption of server processes.

Impact

Exploitation of this vulnerability can cause child process crashes, leading to a denial-of-service condition on the server.

Remediation

Users are advised to upgrade to Apache HTTP Server version 2.4.68, which addresses this vulnerability.