UpHeron
All vulnerabilities

Servers and applications

CVE-2024-43204

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.

Severity
High 7.5
Published
10 Jul 2025
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
2.4.64
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.4.0 before 2.4.64

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-43204
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-43204