apache2

3 results · Clear filters · Feed

• Critical 9.1
  CVE-2024-38475 Exploited Public exploit EPSS 100%

  Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

  Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jul 1, 2024

  KEV May 1, 2025
• Critical 9.0
  CVE-2021-40438 Exploited · Ransomware Public exploit EPSS 100%

  mod_proxy SSRF

  A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Sep 16, 2021

  KEV Dec 1, 2021
• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021