UPDATE: Path Traversal Zero-Day in Apache HTTP Server Exploited (CVE-2021-41773)

On October 7, the Apache HTTP Server Project released version 2.4.51 as a secondary patch for CVE-2021-41773 after it was discovered that the original patch was insufficient. Users should ensure they're updated to the latest version.

For more information, please visit our blog.