Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/httpd@2.4.53-11.el9_2?arch=10
purl pkg:rpm/redhat/httpd@2.4.53-11.el9_2?arch=10
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6tgh-b4td-63f5
Aliases:
CVE-2024-39573
Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue. There are no reported fixed by versions.
VCID-ftjw-9fb6-d3cw
Aliases:
CVE-2024-38473
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:46:34.413109+00:00 RedHat Importer Affected by VCID-6tgh-b4td-63f5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-39573.json 38.0.0
2026-04-01T13:46:32.181999+00:00 RedHat Importer Affected by VCID-ftjw-9fb6-d3cw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-38473.json 38.0.0