CVE-2021-41773
httpd: path traversal and file disclosure vulnerability
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 29, 2021
Updated · November 2, 2026
Description
A path transversal flaw was found in Apache 2.4.49. A remote attacker could use this flaw to map URLs to files outside the expected document root. Additionally this flaw could leak the source of interpreted files like CGI scripts.
Statement
This issue only affects httpd 2.4.49, earlier versions are not affected. Therefore this issue does not affect the versions of httpd shipped with Red Hat products.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory