← Back to CVE List

CVE-2021-39275

Published: 2021-09-16T15:15Z
Last Modified: 2024-11-21T06:19Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt