Related Vulnerabilities: CVE-2021-40438  

In Apache HTTP Server before version 2.4.49, a crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

Severity High

Remote Yes

Type Url request injection

Description

In Apache HTTP Server before version 2.4.49, a crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

AVG-2289 apache 2.4.48-1 2.4.49-1 High Testing

https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2021-40438