PT-2025-30579 · Apache+3 · Apache Http Server+3

Published 2025-07-16 · Updated 2025-11-18 · CVE-2025-54090

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.64

Description A flaw exists in Apache HTTP Server where all "RewriteCond expr ..." tests evaluate as true.

Recommendations Upgrade to version 2.4.65.

Fix

Weakness Enumeration

CWE-253

Related Identifiers

ALT-PU-2025-9746

ALT-PU-2025-9920

ALT-PU-2025-9924

AZL-65654

BDU:2025-09493

BIT-APACHE-2025-54090

CVE-2025-54090

DLA-4270-1

MGASA-2025-0301

OPENSUSE-SU-2025:15384-1

Affected Products

Alt Linux

Apache Http Server

Debian

Red Os

References · 47

• https://advisories.mageia.org/MGASA-2025-0301.html · Security Note
• https://osv.dev/vulnerability/BIT-apache-2025-54090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54090 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15384-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54090 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-54090 · Vendor Advisory
• https://httpd.apache.org/security/vulnerabilities_24.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09493 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2025-54090 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4270-1 · Vendor Advisory
• https://news.ycombinator.com/item?id=44666896 · Patch
• https://osv.dev/vulnerability/MGASA-2025-0301 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65654 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-54090 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-54090 · Vendor Advisory