CVE-2024-43204

score

<0.1

cvss

7.5

epss

0.9%

published

2025-07-10

kev added

—

first seen

2026-10-21

Apache HTTP Server with mod_proxy loaded contains a server side request forgery caused by mod_headers modifying Content-Type header from HTTP request, letting attackers send outbound proxy requests to attacker-controlled URLs, exploit requires specific mod_headers configuration.