writeups.xyz / Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

Submitter : c2a

Date: 9 August 2024

Bounty : undisclosed

Vulnerabilities :

• Confusion Attack
• RCE
• XSS
• Access Control Bypass
• Authentication Bypass
• SSRF

Programs :

• Apache HTTP Server
• ModSecurity
• Redmine

Authors :

• Orange Tsai (@Orange_8361)

Link :
https://blog.orange.tw/2024/08/confusion-attacks-en.html