PT-2025-24054 · Apache · Apache

Fabian Weber · Published 2025-06-06 · Updated 2025-06-09 · CVE-2025-3365

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache versions prior to the fixed version

Description A missing protection against path traversal allows access to any file on the server. This issue affects the Apache software, allowing unauthorized access to files.

Recommendations For Apache versions prior to the fixed version, update to the latest version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive files on the server until a patch is available.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-3365

Affected Products

Apache

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-3365 · Security Note
• https://t.me/nekaspersky/4458 · Telegram Post
• https://t.me/cvenotify/124881 · Telegram Post
• https://twitter.com/CveFindCom/status/1930907549542281350 · Twitter Post
• https://bbraun.com/productsecurity · Note
• https://t.me/cvetracker/25597 · Telegram Post
• https://twitter.com/CVEnew/status/1930903190947676415 · Twitter Post
• https://t.me/latest_high_impact_cve/2563 · Telegram Post