CVE-2024-47252 Apache HTTP Server: mod_ssl error log variable escaping

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apache HTTP Server Vulnerabilities CVE-2024-47252 and CVE-2025-23048 Disclosed Two vulnerabilities in the Apache HTTP Server have been published: CVE-2024-47252, which involves mod_ssl error log variable escaping, and CVE-2025-23048, related to mod_ssl access control bypass with session resumption. Both vulnerabilities were published on July 10, 2025, affecting users of the Apache HTTP Server. 2 sources 39

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)

Apache HTTP Server