Apache CVEs — PoCs and detection rules¶
19 Apache vulnerabilities with detection-only proof-of-concept code and Docker labs; 19 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-25065 — Apache OFBiz SSRF | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32113 — Apache OFBiz Path | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36104 — Apache OFBiz Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38476 — Apache HTTP Server SSRF | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38856 — Apache OFBiz Pre-Auth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41107 — CloudStack Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45195 — Apache OFBiz Unauth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45216 — Solr Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50379 — Apache Tomcat RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52316 — Apache Tomcat Auth | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-56337 — Apache Tomcat RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-54988 — Apache Tika PDF Parser XXE Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53677 — Apache Struts RCE | Critical (9.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51504 — Apache ZooKeeper ACL Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2026-33557 — Apache Kafka JWT Validation Bypass | Critical (9.1) | Snort, YARA, Nginx, Sigma | ✅ |
| CVE-2024-50380 — Apache Tomcat Path Traversal | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27316 — HTTP2 CONTINUATION DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38472 — Apache HTTP Server SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21733 — Apache Tomcat Info Leak | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |