UpHeron
All vulnerabilities

Servers and applications

CVE-2024-40898

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue.

Severity
High 7.5
Published
18 Jul 2024
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
2.4.62
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Every version before 2.4.62

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-40898
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-40898