VYPR
Unrated severityNVD Advisory· Published Jul 1, 2024· Updated Nov 3, 2025

Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

CVE-2024-38476

Description

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.

Users are recommended to upgrade to version 2.4.60, which fixes this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

55

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.