CVE-2024-38476

score

<0.1

cvss

9.8

epss

41.6%

published

2024-07-01

kev added

—

first seen

2026-10-21

Apache HTTP Server 2.4.59 and earlier contain an information disclosure, SSRF, or local script execution vulnerability caused by malicious response headers in backend applications, letting attackers exploit via crafted headers, exploit requires sending malicious headers.