ID:10349 - Exploit for Input validation error in Apache HTTP Server - CVE-2024-38473

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists due to insufficient validation of user-supplied input when handling incorrect encoding in mod_proxy. A remote attacker can force the web server to pass request URLs with incorrect encoding to backend services.

Remediation