一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-79768 [MEDIUM] – Path equivalence: ‘/./’ (single dot directory) vulnerability in Apache HTTP Server’s mod_u

未分类
📑 文章目录

Path equivalence: ‘/./’ (single dot directory) vulnerability in Apache HTTP Server’s mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir)

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.