Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:21:36 +0000 CVE-2021-44224 — Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier https://vulnerability.circl.lu/vuln/cve-2021-44224 <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server</p> <p>A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).</p> <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server</p> <p>A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).</p> https://vulnerability.circl.lu/vuln/cve-2021-44224