NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Apache HHTP-server
view advisory published 2024-07-02
Apache Software Foundation heeft kwetsbaarheden verholpen in de Apache HTTP-Server.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39573US | — | — | ||
Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy.
Users… | ||||
| CVE-2024-38477US | high7.5 | — | ||
null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.
Users are recommended to upgrade to v… | ||||
| CVE-2024-38476US | critical9.8 | Exploit | ||
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response head… | ||||
| CVE-2024-38475US | critical9.1OT critical | KEV | ||
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the se… | ||||
| CVE-2024-38474US | critical9.8 | — | ||
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in
directories permitted by the configuration but not directl… | ||||
| CVE-2024-38473US | — | Exploit | ||
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authenticat… | ||||
| CVE-2024-38472US | — | Exploit | ||
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content
Users are recommended to upgrade to v… | ||||
| CVE-2024-36387US | — | — | ||
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan