CVE-2021-30641: Apache httpd: Unexpected URL matching with 'MergeSlashes OFF'

[Christophe JAILLET <jailletc36 () apache org>]

CVE-2021-30641: Unexpected URL matching with 'MergeSlashes OFF'

Severity: moderate

Vendor: The Apache Software Foundation

Versions Affected:
httpd 2.4.39 to 2.4.46

Description:
Apache HTTP Server 2.4.39 to 2.4.46
Unexpected matching behavior with 'MergeSlashes OFF'
    
Mitigation:
n/a

Credit:
Discovered by Christoph Anton Mitterer

References:
https://httpd.apache.org/security/vulnerabilities_24.html