Related Vulnerabilities: CVE-2021-30641  

Apache HTTP Server versions 2.4.39 to 2.4.46 displays unexpected matching behavior with 'MergeSlashes OFF'.

Severity Medium

Remote Yes

Type Incorrect calculation

Description

Apache HTTP Server versions 2.4.39 to 2.4.46 displays unexpected matching behavior with 'MergeSlashes OFF'.

AVG-2053 apache 2.4.46-3 2.4.47-1 Medium Fixed

https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2021-30641