cve/2024/CVE-2024-39573.md

CVE-2024-39573

Description

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy.Users are recommended to upgrade to version 2.4.60, which fixes this issue.

POC

Reference

No PoCs from references.

Github

• https://github.com/GhostTroops/TOP
• https://github.com/NeoOniX/5ATTACK
• https://github.com/Y09a514/Test-Apache-Vulnerability
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/kennyHuang1110/apache-confusion-scanner
• https://github.com/krlabs/apache-vulnerabilities
• https://github.com/mrmtwoj/apache-vulnerability-testing