| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.4.1, ≤ 2.4.23 |
IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free