CVE-2011-3368

CVE-2011-3368

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.

EPSS 90.7% · Public exploit · Fix available

Published

2011-10-05T22:00:00.000Z

Updated

2024-08-06T23:29:56.890Z

Stack: system

Check your server →