CVE-2021-40438

Apache HTTP Server-Side Request Forgery (SSRF)

Rocky Linux

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

16. Sep 2021

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html
• Debian
  https://www.debian.org/security/2021/dsa-4982
• Hersteller
  https://httpd.apache.org/security/vulnerabilities_24.html
• Hinweis
  https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf
• Hinweis
  https://security.gentoo.org/glsa/202208-20
• Hinweis
  https://security.netapp.com/advisory/ntap-20211008-0004/
• Hinweis
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ
• Hinweis
  https://www.oracle.com/security-alerts/cpuapr2022.html
• Hinweis
  https://www.oracle.com/security-alerts/cpujan2022.html
• Hinweis
  https://www.tenable.com/security/tns-2021-17
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40438
• CISA
  Apache HTTP Server-Side Request Forgery (SSRF)
• NVD
  CVE-2021-40438