{"cvss":0.0,"datePublished":"2021-12-01","dateUpdated":"2021-12-01","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","dueDate":"2021-12-15","id":"CVE-2021-40438","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40438","product":"Apache","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Apache HTTP Server-Side Request Forgery (SSRF)","vendor":"Apache"}