Description
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Remediation
References
Related Vulnerabilities
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1507)
Drupal Core 9.1.x Directory Traversal (9.1.0 - 9.1.10)
Nginx Use After Free Vulnerability (CVE-2012-1180)
Ruby on Rails Improper Input Validation Vulnerability (CVE-2010-3933)
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2086)