CVE-2025-54090

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-54090

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-54090

Aliases

Downstream

Related

Published

2025-07-23T14:15:34.177Z

Modified

2026-03-23T05:04:18.543250122Z

Severity

6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

[none]

Details

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true".

Users are recommended to upgrade to version 2.4.65, which fixes the issue.

References

Affected packages

Type

GIT

Repo

https://github.com/apache/httpd

Events

Introduced

Last affected

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.64"
        }
    ]
}

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54090.json"