Inappropriate escaping of output in mod_rewrite in Apache HTTP Server 2.4.fifty nine and before lets an attacker to map URLs to filesystem destinations which have been permitted to get served because of the server but usually are not deliberately/instantly reachable by any URL, causing code execution or supply code disclosure. https://zandergsdnz.bloggip.com/28268850/helping-the-others-realize-the-advantages-of-apache-support