Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Apache HTTP Server — DSA-4982 Clear all filters
TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

mod_proxy SSRF

Priority CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918
TI-2021-16656 CVE-2021-39275 · GHSA-p59c-pqfv-4fwc

ap_escape_quotes buffer overflow

Priority HIGH 69

ap_escape_quotes() may write beyond the end of a buffer when given malicious input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39402 Published 2021-09-16 Partial fix CWE-787
TI-2021-14579 CVE-2021-36160 · GHSA-f4wr-wvqf-r2q5

mod_proxy_uwsgi out of bound read

Priority HIGH 68

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.63721 Published 2021-09-16 Partial fix CWE-125
TI-2021-13795 CVE-2021-34798 · GHSA-6cg7-x9gh-4wf6

NULL pointer dereference in httpd core

Priority HIGH 69

Malformed requests may cause the server to dereference a NULL pointer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.64509 Published 2021-09-16 Partial fix CWE-476