CVE-2024-38475

Katalog CVE

CVSS 9.1 · Critical KEV · sudah dieksploitasi EPSS 100,0%

Kerentanan Improper Encoding or Escaping of Output pada apache http server, netapp ontap 9 +5 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut NVD. Masuk katalog KEV CISA pada 1 Mei 2025, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected.  Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.

Rincian

Terbit di NVD

1 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-116: Improper Encoding or Escaping of Output

EPSS (30 hari)

100,0% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Apache HTTP Server Improper Escaping of Output Vulnerability

Masuk KEV

1 Mei 2025

Tenggat CISA

22 Mei 2025 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://httpd.apache.org/security/vulnerabilities_24.html advisory vendor
• https://github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38475 advisory pihak ketiga · pemerintah AS
• https://security.netapp.com/advisory/ntap-20240712-0001/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/07/01/8 advisory pihak ketiga
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018 advisory pihak ketiga
• https://www.blackhat.com/us-24/briefings/schedule/index.html#confusion-attacks-exploiting-hidden-semantic-ambi... advisory pihak ketiga