CVE-2024-42516
Apache HTTP Server: HTTP response splitting
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Apache HTTP Server: HTTP response splitting
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue. Users are recommended to upgrade to version 2.4.64, which fixes this issue.
Reserved 2024-08-03 | Published 2025-07-10 | Updated 2025-07-10 | Assigner apacheCWE-20 Improper Input Validation
| 2024-07-18: | reported |
httpd.apache.org/security/vulnerabilities_24.html
Support options
