| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.4.17, < 2.4.49 | 2.4.49 |
| secure backup | < 18.1.0.1.0 | 18.1.0.1.0 |
| zfs storage appliance kit | = 8.8 | |
| tenable.sc | ≤ 5.19.1 |
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free