Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2wcw-rcf9-qm36

Опубликовано: 01 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

EPSS

Процентиль: 68%
0.00599
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 7.4
redhat
около 1 года назад

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 7.5
nvd
около 1 года назад

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS3: 7.5
debian
около 1 года назад

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier ...

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость модуля mod_rewrite веб-сервера Apache HTTP Server, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 68%
0.00599
Низкий

7.5 High

CVSS3

Дефекты

CWE-20