Apache HTTP Server Vulnerabilities CVE-2024-47252 and CVE-2025-23048 Disclosed

Apache HTTP Server Vulnerabilities CVE-2024-47252 and CVE-2025-23048 Disclosed

First seen 18 Feb 2026, 12:23 UTC Api.Msrc.Microsoft 79% similarity 39.1

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in the Apache HTTP Server have been published: CVE-2024-47252, which involves mod_ssl error log variable escaping, and CVE-2025-23048, related to mod_ssl access control bypass with session resumption. Both vulnerabilities were published on July 10, 2025, affecting users of the Apache HTTP Server.

ThreatCluster AI How this analysis works

Timeline

2025-07-10
CVE-2024-47252 and CVE-2025-23048 published
2025-10-22
First public PoC for CVE-2025-23048

Community

Browse all →

Tracked Entities in This Story