CVE-2021-41773
Path Traversal and File Exposure in Apache HTTP Server 2
⚡ KEV — Known Exploited
CVSS 7.5 (High)
EPSS 0.9650 (1th pct)
Technical Description
Path Traversal and File Exposure in Apache HTTP Server 2.4.49 allowing arbitrary file read.
Why this matters to your organisation:
CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 96.5% probability of exploitation within 30 days. The affected service is internet-facing, increasing exposure. This is a critical service for the organisation.
CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 96.5% probability of exploitation within 30 days. The affected service is internet-facing, increasing exposure. This is a critical service for the organisation.
Potential Impact
A vulnerability in http_server rated High (CVSS 7.5). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalogue, indicating it has been actively exploited in the wild.
✅ Recommended Next Action
Review CVE-2021-41773 and confirm whether http_server is in use.
Confidence: Not Applicable
The organisation does not use this product.
CVE Details
| Product | apache http_server |
| Version Range | == 2.4.49 → ∞ |
| Installed | Unknown |
| Match Type | Product Not Used |
| CVSS | 7.5 |
| KEV | YES |
| EPSS | 0.965 |
| Source |
NVD · Oct. 5, 2021 View reference ↗ |
Score Breakdown
⚡ KEV+40
🌐 Exposure+20
⭐ Importance+15
📈 EPSS+14.5
🔢 CVSS+7.5
⚠ Uncertainty-10
Total87