Intrusion PreventionApache.HTTP.Server.mod_proxy.SSRF
Description
This indicates an attack attempt to exploit a Server-Side Request Forgery Vulnerability in Apache HTTP Server.
The vulnerability is due to improper sanitation of a crafted HTTP user input. A remote unauthenticated attacker could exploit this vulnerability by sending an HTTP request to the target vulnerable server. Successful exploitation leads to the disclosure of information which may be used to facilitate further compromise.
Affected Products
Apache HTTP Server 2.4.48 and earlier.
Impact
Security Bypass: Remote attackers can bypass security checks of vulnerable systems to make HTTP requests.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://httpd.apache.org/security/vulnerabilities_24.html
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 50847 |
| Created | Oct 18, 2021 |
| Updated | Feb 29, 2024 |
| CVE ID | |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 94.43% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apache |
| Profile Type | Permission/Privilege/Access Control |