Hi
I have the following setup in my httpd.conf inside the :
RewriteEngine on
RewriteRule ^nonexists.php$ /target.php?nonexists
RewriteRule ^exists.php$ /target.php?exists
Header always set x-request-first-if "YES"
Header always set x-request-seco
Hi
Yes, we're also seeing some different behaviour since the update to 2.4.64
To us, it seems like an incomplete fix that has unwanted side effects.
This is the patch for CVE-2025-23048 ->
https://github.com/apache/httpd/commit/c4cfa50c9068e8b8134c530ab21674e77d1278a2
How to reproduce:
Simple