Exploitation Summary
EIP tracks 3 public exploits for CVE-2024-38473. PoCs published by mrmtwoj, juanschallibaum, Abdurahmon3236. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a Python script that scans for multiple Apache HTTP Server vulnerabilities by sending crafted HTTP requests to detect potential misconfigurations or weaknesses. It does not include exploit code for achieving RCE or other offensive actions, only detection logic.
Description
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Exploits (3)
The repository contains a Python script that scans for multiple Apache HTTP Server vulnerabilities by sending crafted HTTP requests to detect potential misconfigurations or weaknesses. It does not include exploit code for achieving RCE or other offensive actions, only detection logic.
This repository contains a Nuclei template designed to detect Apache HTTP Server instances vulnerable to CVE-2024-38473, an ACL bypass vulnerability in mod_proxy. The template includes multiple HTTP requests to identify vulnerable configurations and potential protected files that could be bypassed.
This repository contains a functional Python script demonstrating an authentication bypass vulnerability in Apache HTTP Server's mod_proxy module via incorrect URL encoding. The PoC sends a crafted request with a maliciously encoded path to bypass authentication and access protected resources.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H