CVE-2024-39573

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URLs to be handled by mod_proxy.

Risk Assessment

An attacker can exploit SSRF to access internal network resources not directly accessible from the outside, potentially leading to data leakage or further attacks.

Recommendation

Upgrade Apache HTTP Server to version 2.4.60, which fixes this issue.

Original NVD description (English source)

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.