Resf

Records1All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Resf records in CISA KEV

Products in the NVD configurations · select one to filter the records

1 record in Rocky Linux · all components

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918