CVE-2025-54090 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, whic…
Medium CVSS: 6.3

CVE-2025-54090

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true".



Users are recommended to upgrade to version 2.4.65, which fixes the issue.
Vendor
Apache
Product
Http Server
CWE
CWE-253
Yayın Tarihi
2025-07-23 14:15:34
Güncelleme
2025-11-04 22:16:27
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-253 Http Server MEDIUM Apache 2025

Referanslar

https://httpd.apache.org/security/vulnerabilities_24.html http://www.openwall.com/lists/oss-security/2025/07/24/2 https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html https://news.ycombinator.com/item?id=44666896