SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content
Users are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.

Published: 2024-07-01

CVSS: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Download Exploit for CVE-2024-38472 here:

Use Tor Browser to access .onion links.

Check our team here:

https://tatramed.sk/exploit-425-cve-2022-47986/

https://tatramed.sk/exploit-909-cve-2021-30255/

https://tatramed.sk/exploit-243-cve-2019-0803/

https://tatramed.sk/exploit-720-cve-2024-38197/

https://tatramed.sk/exploit-1182-cve-2025-24293/