CVE-2021-41524high · CVSS 7.5 — While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to
CVE-2021-41773critical · CVSS 9.8 — A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map U
CVE-2021-42013critical · CVSS 9.8 — It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to