CVE Catalog
CVE-2023-38709
MediumSummary
Faulty input validation in the core of Apache HTTP Server through 2.4.58 allows malicious or exploitable backend/content generators to split HTTP responses, leading to HTTP response splitting attacks.
Risk Assessment
An attacker can manipulate HTTP responses, potentially leading to cache poisoning, session hijacking, or other attacks on users.
Recommendation
Upgrade Apache HTTP Server to version 2.4.59 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.