CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-16
Apache HTTP Server mod_proxy Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-40438) Technical Advisory
[Affected Scope] Apache HTTP Server versions 2.4.48 and earlier with mod_proxy enabled
[Impact] Unauthenticated remote attackers can craft malicious URI paths to force mod_proxy to forward requests to an arbitrary origin server, leading to SSRF
[Mitigation] Immediately upgrade Apache HTTP Server to version 2.4.49 or later, or apply strict RewriteRules to block malicious proxy requests