A security flaw has been identified in the Apache HTTP Server software used by many web hosting platforms. The issue affects the server's built-in tool for forwarding web requests to backend servers: a specially crafted web request can trick this tool into sending traffic to a server selected by the person sending the request, rather than the intended backend server that hosts your website's content. This vulnerability only impacts Apache HTTP Server version 2.4.48 and earlier releases.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2021-40438
