AZL-65169
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-65169.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-65169
- Upstream
- Published
- 2025-07-10T17:15:45Z
- Modified
- 2026-04-01T05:20:29.811720Z
- Summary
- CVE-2024-43204 affecting package httpd for versions less than 2.4.64-1
- Details
-
SSRF in Apache HTTP Server with modproxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where modheaders is configured to modify the Content-Type request or response header with a value provided in the HTTP request.
Users are recommended to upgrade to version 2.4.64 which fixes this issue.
- References