CVE-2021-40438 PoC — mod_proxy SSRF

Source

https://github.com/gassara-kys/CVE-2021-40438

Associated Vulnerability

Title: mod_proxy SSRF (CVE-2021-40438)
Description:A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Description

check CVE-2021-40438

Readme

# CVE-2021-40438

## build

```bash
docker build -t cve-2021-40438:1.0 .
```

## run

```bash
docker run --rm -d -p 4444:80 cve-2021-40438:1.0
```

## check CVE-2021-40438

```bash
./main.sh
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →