{"id":2767,"date":"2024-07-25T10:31:14","date_gmt":"2024-07-25T10:31:14","guid":{"rendered":"https:\/\/certera.com\/blog\/?p=2767"},"modified":"2024-07-25T10:31:17","modified_gmt":"2024-07-25T10:31:17","slug":"serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/","title":{"rendered":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>The Apache Software Foundation has made public several critical vulnerabilities in the Apache HTTP Server that could have a devastating impact, leaving millions of websites vulnerable to hacking attempts.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Apache HTTP Server web server &#8211; A popular choice for millions of websites worldwide. The risks caused by these vulnerabilities are considerable since Apache HTTP Server is widely used in various businesses, including e-commerce, banking, and government.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-essential-specifications-of-the-vulnerabilities\">Essential Specifications of the Vulnerabilities<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Different versions of the Apache HTTP Server are impacted by these vulnerabilities, which can be identified by their <a href=\"https:\/\/certera.com\/blog\/what-is-common-vulnerabilities-and-exposures-cves-guide\/\">Common Vulnerabilities and Exposures (CVE)<\/a> numbers. They could lead to severe outcomes such as denial of service (DoS), exposure of source code, and server-side request forgery (SSRF).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Moreover, these security flaws are particularly concerning as they could expose numerous websites to ransomware, service outages, data leaks, unauthorized access to confidential data, and other cyberattacks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-comprehensive-vulnerability-information\">Comprehensive Vulnerability Information<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-40898\">CVE-2024-40898<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> Using mod_rewrite in the server\/vhost context, Apache HTTP Server on Windows has a Server-Side Request Forgery (SSRF) vulnerability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect: <\/strong>Could send NTLM hashes to a malicious server through manipulated requests and SSRF attacks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-39884\">CVE-2024-39884<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> An Apache HTTP Server 2.4.60 regression ignored specific applications of outdated content-type-based handler configurations.0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect:<\/strong> If files are indirectly requested, this can result in the disclosure of local source code.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-40725\">CVE-2024-40725<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> In Apache HTTP Server 2.4.61, a partial solution for CVE-2024-39884 disregarded specific applications of outdated content-type-based handler configurations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect:<\/strong> Configurations such as &#8220;AddType&#8221; might result in disclosing local source code when files are accessed indirectly in specific scenarios.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-38472\">CVE-2024-38472<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> Windows computers are vulnerable to Server-Side Request Forgery (SSRF).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect: <\/strong>Sensitive NTLM hashes could be exposed.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-36387\">CVE-2024-36387<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> Using HTTP\/2 to serve WebSocket protocol improvements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect:<\/strong> A Null Pointer dereference could come from this, which would crash the service and reduce performance.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-38474\">CVE-2024-38474<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> A bug related to substitution encoding in mod_rewrite for Apache HTTP Server versions 2.4.59 and earlier.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect: <\/strong>Enables scripts intended for CGI execution to be disclosed.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-38477\">CVE-2024-38477<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> In Apache HTTP Server version 2.4.59,&nbsp; mod_proxy contains a null pointer dereference.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect: <\/strong>Permits the server to be crashed by an attacker using a malicious request.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2024-24795\">CVE-2024-24795<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> Apache HTTP Server&#8217;s HTTP Response splitting among several modules<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect: <\/strong>This allows for the potential for HTTP desynchronization attacks by allowing attackers to insert malicious response headers into backend apps.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2023-25690\">CVE-2023-25690<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary<\/strong>: Some configurations of mod_proxy on Apache HTTP Server 2.4.0 through 2.4.55 cause HTTP Request Splitting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect:<\/strong> Cache poisoning and access control bypass are possible because of this HTTP Request Smuggling attack.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2022-29404\">CVE-2022-29404<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> A malicious request to a lua script that calls r:parsebody(0) in Apache HTTP Server 2.4.53 and earlier.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect:<\/strong> this may result in a denial of service since there is no default restriction on the input size that can be sent.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-cve-2022-26377\">CVE-2022-26377<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Summary:<\/strong> An HTTP Request Smuggling Vulnerability in Apache HTTP Server&#8217;s mod_proxy_ajp<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effect:<\/strong> Permits requests to be smuggled to the AJP server to which it sends requests.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-possible-repercussions-of-critical-vulnerabilities-in-the-apache-http-server\">Possible Repercussions of Critical Vulnerabilities in the Apache HTTP Server<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Data Breaches<\/li>\n\n\n\n<li>Service Disruption<\/li>\n\n\n\n<li>Ransomware Attacks<\/li>\n\n\n\n<li>Financial Loss<\/li>\n\n\n\n<li>Reputation Damage<\/li>\n\n\n\n<li>Denial-of-Service<\/li>\n\n\n\n<li>Regulatory Non-Compliance<\/li>\n\n\n\n<li>Unauthorized Access<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prevention-and-recommendations\">Prevention and Recommendations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">These vulnerabilities are even worse because the <a href=\"https:\/\/certera.com\/kb\/how-to-install-ssl-certificate-on-apache-web-server\/\">Apache HTTP Server<\/a> is widely used. Numerous websites and applications, from small companies to major corporations, depend on this software to fuel their online presence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There is a considerable possibility for exploitation, and there could potentially be significant consequences. Cybercriminals might use these security vulnerabilities to hack into networks, gain confidential information, alter websites, or even instigate ransomware operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is highly recommended by the Apache Software Foundation that all users update to version 2.4.62 right away. This update fixes vulnerabilities and offers a crucial defense against intrusions. Avoiding the update might open web servers to hazardous vulnerabilities in security.<\/p>\n\n\n\n<p class=\"quote-section wp-block-paragraph\">Prevent your website, applications, and software from critical vulnerabilities and cyber-attacks with <a href=\"https:\/\/certera.com\/services\">Our Professional Cyber Security Services<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Apache Software Foundation has made public several critical vulnerabilities in the Apache HTTP Server that could have a devastating impact, leaving millions of websites vulnerable to hacking attempts. Apache HTTP Server web server &#8211; A popular choice for millions of websites worldwide. The risks caused by these vulnerabilities are considerable since Apache HTTP Server<span class=\"morelink d-block mt-3\"><a href=\"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/\">Read More<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":2769,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[559,558],"class_list":["post-2767","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vulnerability","tag-apache-critical-vulnerabilities","tag-apache-http-server-vulnerabilities","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.6 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Critical Vulnerabilities in Apache HTTP Server: Millions of Sites at Risk<\/title>\n<meta name=\"description\" content=\"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals to Exploit Millions of Sites by allowing unauthorized access &amp; control.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites\" \/>\n<meta property=\"og:description\" content=\"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals to Exploit Millions of Sites by allowing unauthorized access &amp; control.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/\" \/>\n<meta property=\"og:site_name\" content=\"EncryptedFence by Certera - Web &amp; Cyber Security Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/certeraLLC\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-25T10:31:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-25T10:31:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/certera.com\/blog\/wp-content\/uploads\/2024\/07\/apache-http-server-vulnerabilities-jpg.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"620\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Janki Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@certera_llc\" \/>\n<meta name=\"twitter:site\" content=\"@certera_llc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Janki Mehta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/\"},\"author\":{\"name\":\"Janki Mehta\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#\\\/schema\\\/person\\\/e5a476aa90d9e02260ebfe4b0bf046b7\"},\"headline\":\"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites\",\"datePublished\":\"2024-07-25T10:31:14+00:00\",\"dateModified\":\"2024-07-25T10:31:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/\"},\"wordCount\":666,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/certera.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/apache-http-server-vulnerabilities-jpg.webp\",\"keywords\":[\"Apache Critical Vulnerabilities\",\"Apache HTTP Server Vulnerabilities\"],\"articleSection\":[\"Vulnerability\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#respond\"]}],\"copyrightYear\":\"2024\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/\",\"url\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/\",\"name\":\"Critical Vulnerabilities in Apache HTTP Server: Millions of Sites at Risk\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/certera.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/apache-http-server-vulnerabilities-jpg.webp\",\"datePublished\":\"2024-07-25T10:31:14+00:00\",\"dateModified\":\"2024-07-25T10:31:17+00:00\",\"description\":\"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals to Exploit Millions of Sites by allowing unauthorized access & control.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#primaryimage\",\"url\":\"https:\\\/\\\/certera.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/apache-http-server-vulnerabilities-jpg.webp\",\"contentUrl\":\"https:\\\/\\\/certera.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/apache-http-server-vulnerabilities-jpg.webp\",\"width\":960,\"height\":620,\"caption\":\"Apache HTTP Server Vulnerabilities\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/certera.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/certera.com\\\/blog\\\/\",\"name\":\"EncryptedFence by Certera - Web & Cyber Security Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#organization\"},\"alternateName\":\"Certera's EncryptedFence Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/certera.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#organization\",\"name\":\"Certera\",\"url\":\"https:\\\/\\\/certera.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/certera.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/logo-encryptedfence.svg\",\"contentUrl\":\"https:\\\/\\\/certera.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/logo-encryptedfence.svg\",\"caption\":\"Certera\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/certeraLLC\\\/\",\"https:\\\/\\\/x.com\\\/certera_llc\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/certera-llc\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/certera.com\\\/blog\\\/#\\\/schema\\\/person\\\/e5a476aa90d9e02260ebfe4b0bf046b7\",\"name\":\"Janki Mehta\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcertera.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fhttps-vs-sftp-jpg.webp&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcertera.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fhttps-vs-sftp-jpg.webp&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcertera.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fhttps-vs-sftp-jpg.webp&r=g\",\"caption\":\"Janki Mehta\"},\"description\":\"Janki Mehta is a passionate Cyber-Security Enthusiast who keenly monitors the latest developments in the Web\\\/Cyber Security industry. She puts her knowledge into practice and helps web users by arming them with the necessary security measures to stay safe in the digital world.\",\"sameAs\":[\"https:\\\/\\\/certerassl.com\\\/\"],\"url\":\"https:\\\/\\\/certera.com\\\/blog\\\/author\\\/certerabguser\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Critical Vulnerabilities in Apache HTTP Server: Millions of Sites at Risk","description":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals to Exploit Millions of Sites by allowing unauthorized access & control.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/","og_locale":"en_US","og_type":"article","og_title":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites","og_description":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals to Exploit Millions of Sites by allowing unauthorized access & control.","og_url":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/","og_site_name":"EncryptedFence by Certera - Web &amp; Cyber Security Blog","article_publisher":"https:\/\/www.facebook.com\/certeraLLC\/","article_published_time":"2024-07-25T10:31:14+00:00","article_modified_time":"2024-07-25T10:31:17+00:00","og_image":[{"width":960,"height":620,"url":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2024\/07\/apache-http-server-vulnerabilities-jpg.webp","type":"image\/jpeg"}],"author":"Janki Mehta","twitter_card":"summary_large_image","twitter_creator":"@certera_llc","twitter_site":"@certera_llc","twitter_misc":{"Written by":"Janki Mehta","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#article","isPartOf":{"@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/"},"author":{"name":"Janki Mehta","@id":"https:\/\/certera.com\/blog\/#\/schema\/person\/e5a476aa90d9e02260ebfe4b0bf046b7"},"headline":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites","datePublished":"2024-07-25T10:31:14+00:00","dateModified":"2024-07-25T10:31:17+00:00","mainEntityOfPage":{"@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/"},"wordCount":666,"commentCount":0,"publisher":{"@id":"https:\/\/certera.com\/blog\/#organization"},"image":{"@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#primaryimage"},"thumbnailUrl":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2024\/07\/apache-http-server-vulnerabilities-jpg.webp","keywords":["Apache Critical Vulnerabilities","Apache HTTP Server Vulnerabilities"],"articleSection":["Vulnerability"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#respond"]}],"copyrightYear":"2024","copyrightHolder":{"@id":"https:\/\/certera.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/","url":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/","name":"Critical Vulnerabilities in Apache HTTP Server: Millions of Sites at Risk","isPartOf":{"@id":"https:\/\/certera.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#primaryimage"},"image":{"@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#primaryimage"},"thumbnailUrl":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2024\/07\/apache-http-server-vulnerabilities-jpg.webp","datePublished":"2024-07-25T10:31:14+00:00","dateModified":"2024-07-25T10:31:17+00:00","description":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals to Exploit Millions of Sites by allowing unauthorized access & control.","breadcrumb":{"@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#primaryimage","url":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2024\/07\/apache-http-server-vulnerabilities-jpg.webp","contentUrl":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2024\/07\/apache-http-server-vulnerabilities-jpg.webp","width":960,"height":620,"caption":"Apache HTTP Server Vulnerabilities"},{"@type":"BreadcrumbList","@id":"https:\/\/certera.com\/blog\/serious-vulnerabilities-in-the-apache-http-server-exploit-millions-of-websites\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/certera.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Serious Vulnerabilities in Apache HTTP Server Allow Cybercriminals Exploit Millions of Sites"}]},{"@type":"WebSite","@id":"https:\/\/certera.com\/blog\/#website","url":"https:\/\/certera.com\/blog\/","name":"EncryptedFence by Certera - Web & Cyber Security Blog","description":"","publisher":{"@id":"https:\/\/certera.com\/blog\/#organization"},"alternateName":"Certera's EncryptedFence Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/certera.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/certera.com\/blog\/#organization","name":"Certera","url":"https:\/\/certera.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certera.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2023\/08\/logo-encryptedfence.svg","contentUrl":"https:\/\/certera.com\/blog\/wp-content\/uploads\/2023\/08\/logo-encryptedfence.svg","caption":"Certera"},"image":{"@id":"https:\/\/certera.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/certeraLLC\/","https:\/\/x.com\/certera_llc","https:\/\/www.linkedin.com\/company\/certera-llc\/"]},{"@type":"Person","@id":"https:\/\/certera.com\/blog\/#\/schema\/person\/e5a476aa90d9e02260ebfe4b0bf046b7","name":"Janki Mehta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcertera.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fhttps-vs-sftp-jpg.webp&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcertera.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fhttps-vs-sftp-jpg.webp&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcertera.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fhttps-vs-sftp-jpg.webp&r=g","caption":"Janki Mehta"},"description":"Janki Mehta is a passionate Cyber-Security Enthusiast who keenly monitors the latest developments in the Web\/Cyber Security industry. She puts her knowledge into practice and helps web users by arming them with the necessary security measures to stay safe in the digital world.","sameAs":["https:\/\/certerassl.com\/"],"url":"https:\/\/certera.com\/blog\/author\/certerabguser\/"}]}},"_links":{"self":[{"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/posts\/2767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/comments?post=2767"}],"version-history":[{"count":4,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/posts\/2767\/revisions"}],"predecessor-version":[{"id":2772,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/posts\/2767\/revisions\/2772"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/media\/2769"}],"wp:attachment":[{"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/media?parent=2767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/categories?post=2767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/certera.com\/blog\/wp-json\/wp\/v2\/tags?post=2767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}