CVE-2021-41773 - Apache HTTP RCE 0-Day - POC

Follow Me on Twitter: CVE-2021-41773 - Apache HTTP Remote Code Execution 0-Day Reverse Shell - POC Also, it works with (CVE-2021-42013) On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the most widely used web servers. According to the security advisory, CVE-2021-41773 has been exploited in the wild as a zero-day. The vulnerability was disclosed to the Apache HTTP Server Project on September 29 by Ash Daulton and the cPanel Security Team. However, the advisory does not indicate when exploitation of CVE-2021-41773 was detected, but it stands to reason that the exploitation drove the expedited release of a patch.