CVE-2021-41773 — Path traversal in Apache HTTP Server 2.4.49 (CVE-2021-41773) | Kitploit

CVE-2021-41773

Path traversal in Apache HTTP Server 2.4.49 (CVE-2021-41773)

For educational purposes only

Test

Set up the PoC environment

$ docker build -t cve-2021-41773 . 
$ docker run --rm -dit -p 8000:80 cve-2021-41773

Confirm it works

$ curl http://localhost:8000
<html><body><h1>It works!</h1></body></html>

Exploit

It is not committed for security reasons.

References