Search: CVE-2024-39884

A regression vulnerability in Apache HTTP Server version 2.4.60 causes the server to ignore some legacy content-type based handler configurations such as "AddType". This can lead to source code disclosure of local content, for example, PHP scripts being served as plain text instead of being interpreted. The issue is fixed in Apache HTTP Server version 2.4.61, and users are recommended to upgrade to this version to mitigate the risk.