An HTTP response splitting vulnerability exists in multiple Apache HTTP Server modules when interacting with untrusted or compromised backend servers. This affects Apache HTTP Server versions up to and including 2.4.66. The vulnerability allows an attacker to manipulate HTTP responses, potentially leading to information disclosure or other impacts. The issue is resolved in Apache HTTP Server version 2.4.67.