CVE-2024-38475

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38475
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected.  Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/07/01/8 Third Party Advisory
https://github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf Patch
https://httpd.apache.org/security/vulnerabilities_24.html Vendor Advisory
https://httpd.apache.org/security/vulnerabilities_24.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20240712-0001/ Third Party Advisory
https://security.netapp.com/advisory/ntap-20240712-0001/ Third Party Advisory
https://www.blackhat.com/us-24/briefings/schedule/index.html#confusion-attacks-exploiting-hidden-semantic-ambiguity-in-apache-http-server-pre-recorded-40227 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:*
History

02 May 2025, 15:43

Type Values Removed Values Added
References () https://httpd.apache.org/security/vulnerabilities_24.html - () https://httpd.apache.org/security/vulnerabilities_24.html - Vendor Advisory
References () https://github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf - () https://github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf - Patch
References () http://www.openwall.com/lists/oss-security/2024/07/01/8 - () http://www.openwall.com/lists/oss-security/2024/07/01/8 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20240712-0001/ - () https://security.netapp.com/advisory/ntap-20240712-0001/ - Third Party Advisory
References () https://www.blackhat.com/us-24/briefings/schedule/index.html#confusion-attacks-exploiting-hidden-semantic-ambiguity-in-apache-http-server-pre-recorded-40227 - () https://www.blackhat.com/us-24/briefings/schedule/index.html#confusion-attacks-exploiting-hidden-semantic-ambiguity-in-apache-http-server-pre-recorded-40227 - Third Party Advisory
CPE cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:*
First Time Apache http Server
Netapp ontap 9
Netapp
Apache

02 May 2025, 01:00

Type Values Removed Values Added
CWE CWE-116
References
  • () http://www.openwall.com/lists/oss-security/2024/07/01/8 -
  • () https://github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf -
  • () https://www.blackhat.com/us-24/briefings/schedule/index.html#confusion-attacks-exploiting-hidden-semantic-ambiguity-in-apache-http-server-pre-recorded-40227 -

12 Jul 2024, 14:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20240712-0001/ -

01 Jul 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-01 19:15

Updated : 2025-05-02 15:43

NVD link : CVE-2024-38475

Mitre link : CVE-2024-38475

JSON object : View

Products Affected

apache

  • http_server

netapp

  • ontap_9
CWE

No CWE.