Apache patches critical HTTP/2 flaw in server version 2.4.71
Apache released the fix on November 11th. Wiz estimates that 64% of cloud environments Wiz measures contain affected resources and 51% have publicly exposed instances, without accounting for configuration.
Covered by 3 publishers within an hour of the first report.
Summary from RuntimeWire.
Reporting3
RuntimeWire Apache patches critical HTTP/2 flaw in server version 2.4.71 · RuntimeWire Staff
The Hacker News Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely · info@thehackernews.com (The Hacker News)
Cyber Security News Apache Patches Critical HTTP/2 Flaw Allowing Remote Code Execution on Web Servers · Abinaya