296,137
Total vulnerabilities in the database
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response.
This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue.
Users are recommended to upgrade to version 2.4.64, which fixes this issue.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 2.4.0 | 2.4.64 |