CVE-2024-38476

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerable to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.

Risk Assessment

An attacker can access sensitive information, perform SSRF attacks on internal resources, or execute local scripts, potentially leading to privilege escalation.

Recommendation

Upgrade Apache HTTP Server to version 2.4.60, which fixes this issue.

Original NVD description (English source)

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.