ByteOS Network

NVD Vulnerability Details :

CVE-2024-43204

Analyzed

Source-security@apache.org

Published At-10 Jul, 2025 | 17:15

Updated At-29 Jul, 2025 | 15:16

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CPE Matches

The Apache Software Foundation

>>http_server>>Versions from 2.4.0(inclusive) to 2.4.64(exclusive)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-918	Secondary	security@apache.org

References

Hyperlink	Source	Resource
https://httpd.apache.org/security/vulnerabilities_24.html	security@apache.org	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History