GHSA-q29r-xr2f-g7j5
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 14, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.