CVE-2022-37436

score

<0.1

cvss

5.3

epss

55.9%

published

2023-01-17

kev added

—

first seen

2026-10-21

Apache HTTP Server < 2.4.55 contains a header truncation caused by a malicious backend, letting some headers be incorporated into the response body, which may prevent clients from interpreting security headers, exploit requires malicious backend control.