CVSS 3.1
6.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LCVE-2024-24795
Medium (6.3). EPSS 2.9% chance of exploitation in the next 30 days.
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.
Users are recommended to upgrade to version 2.4.59, which fixes this issue.
Severity
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-113, CWE-444
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:http_server
- apple:macos
- broadcom:fabric_operating_system
- debian:debian_linux
- fedoraproject:fedora
- netapp:ontap
- netapp:ontap_tools