Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF)

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
ApacheCVE-2021-40438
Related
CVE-2016-3081: Apache Struts Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 08, 2026
CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026