Read the docs
Red Hat Security Advisory

RHSA-2021:3745

Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9 security update

Released 2021-10-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

mod_proxy SSRF

Priority CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918