CVE-2024-38472

Apache HTTP Server on WIndows UNC SSRF

SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.

Affected

Apache Software Foundation · Apache HTTP Server

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

69.47% chance of exploitation in the next 30 days, 99th percentile

Nuclei

high · CWE-918

Published

2024-07-01

Updated

2024-11-18

Proof-of-concept exploits (2)

• Abdurahmon3236/CVE-2024-384724★ · 2024-08-03
• mrmtwoj/apache-vulnerability-testing135★ · 2024-10-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml

Security advisories

• https://httpd.apache.org/security/vulnerabilities_24.html
• https://security.netapp.com/advisory/ntap-20240712-0001

References

• CVE Record
• NVD entry

Related

• CVE-2022-4539
• CVE-2024-24549
• CVE-2024-31211
• CVE-2024-36539
• CVE-2024-38473
• CVE-2024-39614