CVE-2021-40438 Apache Apache
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
- CVSS
- not scored
On CISA’s exploited list
Apache HTTP Server-Side Request Forgery (SSRF)
- Added
- 2021-12-01
- Federal patch deadline
- 2021-12-15
- Ransomware use
- known