CVE Catalog
CVE-2024-38473
MediumSummary
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests.
Risk Assessment
An attacker can bypass authentication mechanisms and gain unauthorized access to protected backend resources.
Recommendation
Upgrade Apache HTTP Server to version 2.4.60, which fixes this issue.
Original NVD description (English source)
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.