← Database

CVE-2024-40898

HIGH CVSS: 7.5 Published: 2024-07-18 Modified: 2026-06-17

Description

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. 

Affected Platforms

Microsoft WindowsApache Http Server

Weakness Type

CWE-918

References