CVE-2024-38476

CVSS V2 None CVSS V3 None

Description

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Overview

CVE ID
CVE-2024-38476

Assigner
apache

Vulnerability Status
PUBLISHED

Published Version
2024-07-01T18:15:40.071Z

Last Modified Date
2024-07-01T18:15:40.071Z

Weakness Enumerations

CWE	URL
CWE-829	http://cwe.mitre.org/data/definitions/829.html

References

Reference URL	Reference Tags
https://httpd.apache.org/security/vulnerabilities_24.html	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-38476
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38476

History

Created	Old Value	New Value	Data Type	Notes
2024-07-02 13:13:58				Added to TrackCVE