{"id":"CVE-2024-38472","aliases":["ALPINE-CVE-2024-38472","BELL-CVE-2024-38472","BIT-apache-2024-38472","EUVD-2024-37353","GHSA-fjcc-r94c-wxr8","openSUSE-SU-2024:14116-1"],"status":"published","title":"Apache HTTP Server on WIndows UNC SSRF","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.6947,"percentile":0.99367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-918"],"published":"2024-07-01T18:12:27Z","modified":"2026-11-04T10:31:02Z","exploits":[{"source":"pocgithub","id":"Abdurahmon3236/CVE-2024-38472","title":"Abdurahmon3236/CVE-2024-38472","date":"2024-08-03","url":"https://github.com/Abdurahmon3236/CVE-2024-38472"},{"source":"pocgithub","id":"mrmtwoj/apache-vulnerability-testing","title":"mrmtwoj/apache-vulnerability-testing","date":"2024-10-05","url":"https://github.com/mrmtwoj/apache-vulnerability-testing"},{"source":"nuclei","id":"CVE-2024-38472","title":"Apache HTTPd Windows UNC - Server-Side Request Forgery","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml"}],"fixes":[{"ecosystem":"Alpine:v3.17","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.60-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"apache","fixed_in":["2.4.60"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.60-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"apache","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.0"},{"fixed":"2.4.60"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.61-1.1"}]}],"bundled":9}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"},{"vendor":"apache_software_foundation","product":"apache_http_server"},{"vendor":"netapp","product":"ontap"}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["vendor-advisory","x_transferred","Vendor Advisory","web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240712-0001/","tags":["x_transferred","Third Party Advisory","web","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/5","tags":["Mailing List","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38472","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240712-0001"},{"url":"https://github.com/advisories/GHSA-fjcc-r94c-wxr8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-38472","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-38472","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38472.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39884","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-38472","title":"Apache HTTP Server on WIndows UNC SSRF","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-01T18:12:27.616Z","modified":"2026-11-04T00:01:23.425Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-918"],"updated_at":"2026-11-04T00:47:47.540303Z"}],"euvd":[{"id":"EUVD-2024-37353","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-01T18:12:27Z","modified":"2026-11-04T00:01:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-04T01:51:27.299093Z"}],"ghsa":[{"id":"GHSA-fjcc-r94c-wxr8","title":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious...","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-01T21:31:14Z","modified":"2025-07-01T21:32:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:02:53.302581Z"}],"nvd":[{"id":"CVE-2024-38472","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-01T19:15:04.563Z","modified":"2026-11-03T22:17:21.75Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-918"],"updated_at":"2026-11-04T00:47:54.173626Z"}],"osv":[{"id":"ALPINE-CVE-2024-38472","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-01T19:15:04.563Z","modified":"2026-11-02T11:17:50.098376781Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-38472","title":"CVE-2024-38472 does not affect BellSoft software","status":"withdrawn","published":"2024-07-05T09:24:50.656911Z","modified":"2026-01-26T09:48:38.744239Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:19.923987Z"},{"id":"CVE-2024-38472","title":"Apache HTTP Server on WIndows UNC SSRF","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-01T18:12:27.616Z","modified":"2026-11-05T02:30:52.528847031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-918"],"updated_at":"2026-11-07T03:07:53.435916Z"},{"id":"BIT-apache-2024-38472","description":"SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.","status":"published","published":"2024-07-03T07:17:47.954Z","modified":"2024-07-13T07:54:56.24Z","updated_at":"2026-11-02T15:28:28.267217Z"},{"id":"openSUSE-SU-2024:14116-1","title":"apache2-2.4.61-1.1 on GA media","description":"These are all security issues fixed in the apache2-2.4.61-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-09T00:00:00Z","modified":"2026-02-04T04:03:28.785294Z","updated_at":"2026-11-02T16:58:36.662953Z"}]}}