CVE-2021-40438
KEV RANSOMWARECRITICAL 9.0EPSS 100.0%
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
- CVSS v3.1
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS v2.0
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 100.00% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2021-12-01, used in ransomware campaigns
- Nuclei
- critical · CWE-918
- Published
- 2021-09-16
- Updated
- 2026-08-06
Proof-of-concept exploits (11)
- BabyTeam1024/CVE-2021-404382★ · 2021-10-28
- Cappricio-Securities/CVE-2021-404381★ · 2024-06-24
- Kashkovsky/CVE-2021-4043818★ · 2022-04-03
- ericmann/apache-cve-poc0★ · 2021-11-11
- gassara-kys/CVE-2021-404381★ · 2022-06-10
- pisut4152/Sigma-Rule-for-CVE-2021-40438-exploitation-attempt1★ · 2021-11-30
- sergiovks/CVE-2021-40438-Apache-2.4.48-SSRF-exploit10★ · 2023-12-12
- sixpacksecurity/CVE-2021-4043814★ · 2021-10-24
- vsh00t/BB-PoC0★ · 2021-11-22
- xiaojiangxl/CVE-2021-404384★ · 2021-10-18
- n0m-d/CVE-2021-40438-POC
Nuclei templates (1)
Vulhub environments (1)
Exploit collections (2)
- chaitin/xray/blob/master/pocs/apache-httpd-cve-2021-40438-ssrf.yml
- zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2021/CVE-2021-40438.yaml