PT-2024-5104
CVE-2024-39573
·
تاريخ النشر
2024-04-01
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Apache HTTP Server versions 2.4.59 and earlier
Description:
The issue is related to a potential Server-Side Request Forgery (SSRF) in the mod rewrite module of the Apache HTTP Server. This allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod proxy. The vulnerability is due to insufficient validation of incoming requests.
Recommendations:
For Apache HTTP Server versions 2.4.59 and earlier, upgrade to version 2.4.60, which fixes this issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾