CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Windows, Apache. Its EPSS score suggests a 68.0% probability of exploitation in the next 30 days.
CVE
CVE-2024-38472
Severity
HIGH
CVSS
7.5
EPSS
67.95%
Windows Apache
Original NVD Description
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
Related CVEs
Other vulnerabilities affecting the same vendor(s)