CVE-2024-39573
CVE-2024-39573
highEPSS 98%
Severity
high
103.22
no public PoC known
7.5
98.3 %
Critical — model predicts very high exploitation likelihood in the next 30 days.
Published
2024-07-01 19:15 UTC
CWE-20
Weakness classes (CWE)
CWE-20Class
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
cwe.mitre.org →
Description
Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Source: NVD