CVE-2024-43394
Last modified
CVE-2024-43394 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths. The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths. The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Http Server | >= 2.4.0, < 2.4.64 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-43394?
How severe is CVE-2024-43394?
How do I fix CVE-2024-43394?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43389A low privileged remote attacker can perform configuration c…8.1
- CVE-2024-4339The Prime Slider – Addons For Elementor (Revolution of a sli…5.4
- CVE-2024-43390A low privileged remote attacker can perform configuration c…8.1
- CVE-2024-43391A low privileged remote attacker can perform configuration c…8.1
- CVE-2024-43392A low privileged remote attacker can perform configuration c…8.1
- CVE-2024-43393A low privileged remote attacker can perform configuration c…8.1
- CVE-2024-43395CraftOS-PC 2 is a rewrite of the desktop port of CraftOS fro…8.2
- CVE-2024-43396Khoj is an application that creates personal AI agents. The …5.4
- CVE-2024-43397Apollo is a configuration management system. A vulnerability…4.3
- CVE-2024-43398REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6…5.9
- CVE-2024-43399Mobile Security Framework (MobSF) is a pen-testing, malware …9.8
- CVE-2024-4340Passing a heavily nested list to sqlparse.parse() leads to a…7.5
Are you affected by CVE-2024-43394?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST