CVE-2024-43204 | BDVDB-2026-285642 Detail

Description#

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-07-10Record published in the CVE List.
2. Version 22025-11-04Most recent update recorded in the CVE List.