.. / CVE-2021-40438

• SSRF
• Nuclei
• Web

Exploit for Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery (CVE-2021-40438)

Description:

Apache 2.4.48 and below contain an issue where uri-path can cause mod_proxy to forward the request to an origin server chosen by the remote user.

Nuclei Template

View the template here CVE-2021-40438.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40438.yaml

References: