https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T07:06:10.627041+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-43204 CVE-2024-43204 — Apache HTTP Server: SSRF with mod_headers setting Content-Type header 2026-09-29T07:06:11.247959+00:00

Affected: Apache Software Foundation Apache HTTP Server

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.