Apache mod_userdir CRLF injection

披露于 2018/08/14 · 更新于 2025/07/17

CVSS 评分6.1/ 10.0

EPSS 概率80.3%百分位 99.1%

漏洞描述

Apache CRLF injection allowing HTTP response splitting attacks on sites using mod_userdir.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 Apache HTTP Server 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2018-8011 Apache HTTP Server - NULL Pointer Dereference Apache HTTP Server	高危	—	—	PoCEXP	2026/01/14
CVE-2024-38472 Apache HTTPd Windows UNC - Server-Side Request Forgery Apache HTTP Server	高危	7.5	85.1%	PoCEXP	2024/08/01
CVE-2024-38473 Apache HTTP Server - ACL Bypass Apache HTTP Server	高危	8.1	82.3%	PoCEXP	2024/07/12
apache_server_status_localhost Server Status Disclosure Apache HTTP Server	低危	—	—	PoCEXP	2024/06/13
CVE-2024-27316RCE CVE-2024-27316 Apache HTTP Server	高危	7.5	89.9%	PoCEXP	2024/04/04
apache_licensercRCE Apache License File Apache HTTP Server	低危	—	—	PoCEXP	2024/01/15