← Database

CVE-2024-39573

HIGH CVSS: 7.5 Published: 2024-07-01 Modified: 2026-06-17

Description

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Affected Platforms

Netapp OntapApache Http Server

Weakness Type

CWE-20

References