CVE-2024-43394

published 2025-07-10

CVE-2024-43394: Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache…

Priority P3 46 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via
mod_rewrite or apache expressions that pass unvalidated request input.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63.

Note: The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths.

The server offers limited protection against administrators directing the server to open UNC paths.
Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	http_server	>= 2.4.0 < 2.4.64	2.4.64
apache_software_foundation	apache_http_server	2.4.0 – 2.4.63	—
debian	apache2	< apache2 2.4.65-1~deb11u1 (bullseye)	apache2 2.4.65-1~deb11u1 (bullseye)

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

osv 7.5 HIGH

vendor_debian 7.5 LOW

vendor_redhat 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-918