mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
1.2 KiB
1.2 KiB
CVE-2024-38472
&color=brighgreen)
Description
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
POC
Reference
No PoCs from references.
Github
- https://github.com/Abdurahmon3236/CVE-2024-38472
- https://github.com/GhostTroops/TOP
- https://github.com/NeoOniX/5ATTACK
- https://github.com/Y09a514/Test-Apache-Vulnerability
- https://github.com/kennyHuang1110/apache-confusion-scanner
- https://github.com/krlabs/apache-vulnerabilities
- https://github.com/mrmtwoj/apache-vulnerability-testing
- https://github.com/nomi-sec/PoC-in-GitHub