Skip to content

Vulnerabilities of Apache http_server

Is your version affected?

CVE Summary Score Published
CVE-2024-39573 Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules… Not rated Jul 1, 2024
CVE-2024-38476 Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local… Not rated Jul 1, 2024
CVE-2024-38475 Exploited Apache HTTP Server Improper Escaping of Output Vulnerability Not rated Jul 1, 2024
CVE-2024-27316 HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP… Not rated Apr 4, 2024
CVE-2023-38709 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP… Not rated Apr 4, 2024
CVE-2023-27522 HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi Not rated Mar 7, 2023

Other Apache products