CVE-2024-38473

CVSS V2 None CVSS V3 None

Description

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Overview

CVE ID
CVE-2024-38473

Assigner
apache

Vulnerability Status
PUBLISHED

Published Version
2024-07-01T18:14:21.520Z

Last Modified Date
2024-07-01T18:14:21.520Z

Weakness Enumerations

CWE	URL
CWE-116	http://cwe.mitre.org/data/definitions/116.html

References

Reference URL	Reference Tags
https://httpd.apache.org/security/vulnerabilities_24.html	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-38473
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38473

History

Created	Old Value	New Value	Data Type	Notes
2024-07-02 13:14:37				Added to TrackCVE