Firetruck

CVE-2021-40438

KEV · Ransomware
Updated Aug 6, 2026 · PUBLISHED
View KEV entry →

Description

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Apache HTTP ServerApache Software Foundation / Apache HTTP Server>= Apache HTTP Server 2.4, <= 2.4.48affected