Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 09:33:06 +0000 CVE-2024-40725 — Apache HTTP Server: source code disclosure with handlers configured via AddType https://vulnerability.circl.lu/vuln/cve-2024-40725 <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server</p> <p>A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. &#34;AddType&#34; and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.</p> <p>Users are recommended to upgrade to version 2.4.62, which fixes this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server</p> <p>A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. &#34;AddType&#34; and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.</p> <p>Users are recommended to upgrade to version 2.4.62, which fixes this issue.</p> https://vulnerability.circl.lu/vuln/cve-2024-40725