Inappropriate escaping of output in mod_rewrite in Apache HTTP Server two.4.59 and previously allows an attacker to map URLs to filesystem locations which have been permitted to generally be served by the server but are certainly not deliberately/instantly reachable by any URL, resulting in code execution or resource code disclosure. https://apache-support45444.blog2freedom.com/28247853/how-much-you-need-to-expect-you-ll-pay-for-a-good-apache-web-server-support