{"cvss":0.0,"datePublished":"2025-04-29T00:00:00Z","dateUpdated":"2025-04-29T00:00:00Z","description":"Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.","dueDate":"2025-05-22T00:00:00Z","id":"CVE-2024-38475","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"HTTP Server","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Apache HTTP Server Improper Escaping of Output Vulnerability","vendor":"Apache"}