CVE-2021-33193: A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2021-08-06 00:00 UTC
  • Importiert: 2026-10-15 12:54 UTC
  • Quelle-ID: apache_httpd_sec
  • uid_hash: 0ee6ea0ddd717bef0806227087c63f26575eb9fc0409a1768a8e5228259903d1

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2021-33193

2021-08-16

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Apache HTTP Server Security (httpd.org JSON)

apache_httpd_sec

vendor_advisory webserver, httpd - de https://httpd.apache.org/security/vulnerabilities-httpd.json