by Kastro
Paper/Archive/CVE-2021-40438

CVE-2021-40438

Apache Software Foundation Apache HTTP Server — mod_proxy SSRF

KEV · due 15 Decransomware useEPSS 100%public exploitSSVC actCVSS 9.0
critical.is priorityof 100
97
CVSS 9.0 (ADP)9.0 / 10 × 3027.0In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Affected

ProductAffectedFixed inSource
Apache HTTP ServerApache HTTP Server 2.4 – 2.4.48–CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refhttpd.apache.org/security/vulnerabilities_24.htmladvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWDreflists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3Ereflists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3Ereflists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3Ereflists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3Eadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45Rreflists.debian.org/debian-lts-announce/2021/10/msg00001.htmlreflists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3Eadvisorydebian.org/security/2021/dsa-4982reflists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3Ereflists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00%40%3Cusers.httpd.apache.org%3Eadvisorytools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQreforacle.com/security-alerts/cpujan2022.htmlreftenable.com/security/tns-2021-17refsecurity.netapp.com/advisory/ntap-20211008-0004reforacle.com/security-alerts/cpuapr2022.htmlrefcert-portal.siemens.com/productcert/pdf/ssa-685781.pdfadvisorysecurity.gentoo.org/glsa/202208-20refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40438kevcisa.gov/known-exploited-vulnerabilities-catalog