NCSC-2024-0314

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Apache HTTP Server

view advisory published 2024-07-19

Er zijn twee kwetsbaarheden verholpen in Apache HTTP server 2.4.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-40898UShigh7.5Exploit
SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users…
CVE-2024-40725USmedium5.3Exploit
A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar config…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan