Lucene search
HistoryJul 01, 2024 - 7:15 p.m.
CVE-2024-38476
cve-2024-38476
apache http server
information disclosure
ssrf
local script execution
upgrade
0.0004 Low
EPSS
Percentile
9.2%
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.
Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Related
ubuntucve
ubuntucve
CVE-2024-38476
2024-07-01 00:00:00
debiancve
debiancve
CVE-2024-38476
2024-07-01 19:15:04
cvelist
cvelist
cve
cve
CVE-2024-38476
2024-07-01 19:15:04
osv
osv
BIT-apache-2024-38476
2024-07-03 07:16:44
alpinelinux
alpinelinux
CVE-2024-38476
2024-07-01 19:15:04
vulnrichment
vulnrichment
redhatcve
redhatcve
CVE-2024-38476
2024-07-02 17:32:58
openvas
openvas
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Linux
2024-07-01 00:00:00
Slackware: Security Advisory (SSA:2024-184-01)
2024-07-03 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Windows
2024-07-01 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
nessus
nessus
FreeBSD : Apache httpd -- Multiple vulnerabilities (d7efc2ad-37af-11ef-b611-84a93843eb75)
2024-07-02 00:00:00
Apache 2.4.x < 2.4.60 Multiple Vulnerabilities
2024-07-01 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48