Description
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 15 Dec 2021.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.