CVE-2024-43204 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely c…
High CVSS: 7.5

CVE-2024-43204

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.
Vendor
Apache
Product
Http Server
CWE
CWE-918
Yayın Tarihi
2025-07-10 17:15:45
Güncelleme
2025-11-04 22:16:03
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-918 Http Server HIGH Apache 2025

Referanslar

https://httpd.apache.org/security/vulnerabilities_24.html http://www.openwall.com/lists/oss-security/2025/07/10/2 http://www.openwall.com/lists/oss-security/2025/07/10/4 https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html