← Database

CVE-2021-40438

CRITICAL CVSS: 9.0 Published: 2021-09-16 Modified: 2026-08-06

Description

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Affected Platforms

Redhat Enterprise Linux ServerRedhat Enterprise Linux For Ibm Z Systems EusDebian Debian LinuxNetapp Clustered Data OntapRedhat Jboss Core ServicesF5 F5OsOracle Enterprise Manager Ops CenterRedhat Enterprise Linux For Arm 64 EusOracle Instantis EnterprisetrackRedhat Enterprise Linux Eus

Weakness Type

CWE-918, CWE-918

References