Description

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Remediation

References

CVE-2024-38473

Related Vulnerabilities

WordPress Plugin Catch Breadcrumb Cross-Site Scripting (1.5.4)

WordPress Plugin Ultimate Google Analytics Cross-Site Request Forgery (1.6.0)

OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-2650)

WordPress Plugin Dynamic Widgets Multiple Unspecified Vulnerabilities (1.5.7)

MySQL CVE-2018-2786 Vulnerability (CVE-2018-2786)

Severity

High

Classification

CVE-2024-38473 CWE-116 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Tags

Missing Update Known Vulnerabilities