cve/2024/CVE-2024-24795.md

### [CVE-2024-24795](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795)
![](https://img.shields.io/static/v1?label=Product&message=Apache%20HTTP%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.4.0%3C%3D%202.4.58%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-113%20Improper%20Neutralization%20of%20CRLF%20Sequences%20in%20HTTP%20Headers%20('HTTP%20Response%20Splitting')&color=brighgreen)

### Description

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.Users are recommended to upgrade to version 2.4.59, which fixes this issue.

### POC

#### Reference
- http://seclists.org/fulldisclosure/2024/Jul/18

#### Github
- https://github.com/NeoOniX/5ATTACK
- https://github.com/fkie-cad/nvd-json-data-feeds
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`### [CVE-2024-24795](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24795)`
			`![](https://img.shields.io/static/v1?label=Product&message=Apache%20HTTP%20Server&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=2.4.0%3C%3D%202.4.58%20&color=brighgreen)`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-113%20Improper%20Neutralization%20of%20CRLF%20Sequences%20in%20HTTP%20Headers%20('HTTP%20Response%20Splitting')&color=brighgreen)`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00
			`### Description`

			`HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.Users are recommended to upgrade to version 2.4.59, which fixes this issue.`

			`### POC`

			`#### Reference`
Update CVE sources 2024-08-10 19:04 2024-08-10 19:04:30 +00:00			`- http://seclists.org/fulldisclosure/2024/Jul/18`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00
			`#### Github`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/NeoOniX/5ATTACK`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`- https://github.com/fkie-cad/nvd-json-data-feeds`