Количество 15
Количество 15
BDU:2025-08957
Уязвимость модуля mod_proxy веб-сервера Apache HTTP Server, позволяющая нарушителю осуществить SSRF-атаку
ROS-20250929-15
Множественные уязвимости httpd
CVE-2024-43204
SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.
CVE-2024-43204
SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.
CVE-2024-43204
SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.
CVE-2024-43204
Apache HTTP Server: SSRF with mod_headers setting Content-Type header
CVE-2024-43204
SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to ...
GHSA-q2wp-r77c-3cw8
SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.
SUSE-SU-2025:02685-1
Security update for apache2
SUSE-SU-2025:02684-1
Security update for apache2
SUSE-SU-2025:02683-1
Security update for apache2
SUSE-SU-2025:02682-1
Security update for apache2
SUSE-SU-2025:02565-1
Security update for apache2
openSUSE-SU-2026:20810-1
Security update for apache2
SUSE-SU-2026:2686-1
Security update for apache2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-08957 Уязвимость модуля mod_proxy веб-сервера Apache HTTP Server, позволяющая нарушителю осуществить SSRF-атаку | CVSS3: 5.4 | 1% Низкий | около 2 лет назад |
 | ROS-20250929-15 Множественные уязвимости httpd | CVSS3: 7.5 | 10 месяцев назад | |
 | CVE-2024-43204 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue. | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | CVE-2024-43204 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue. | CVSS3: 5.4 | 1% Низкий | около 1 года назад |
 | CVE-2024-43204 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue. | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | CVE-2024-43204 Apache HTTP Server: SSRF with mod_headers setting Content-Type header | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
| CVE-2024-43204 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to ... | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
| GHSA-q2wp-r77c-3cw8 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue. | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | SUSE-SU-2025:02685-1 Security update for apache2 | 12 месяцев назад | ||
| SUSE-SU-2025:02684-1 Security update for apache2 | 12 месяцев назад | ||
| SUSE-SU-2025:02683-1 Security update for apache2 | 12 месяцев назад | ||
| SUSE-SU-2025:02682-1 Security update for apache2 | 12 месяцев назад | ||
| SUSE-SU-2025:02565-1 Security update for apache2 | около 1 года назад | ||
| openSUSE-SU-2026:20810-1 Security update for apache2 | 2 месяца назад | ||
| SUSE-SU-2026:2686-1 Security update for apache2 | около 1 месяца назад |
Уязвимостей на страницу