tocsin

Debian/apache2: high 7.5

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request inp

Action: Upgrade apache2 to 2.4.65-1~deb11u1 or later.

Affected

introducedfixedlast affected
02.4.65-1~deb11u1-

Fixed versions

2.4.65-1~deb11u1

Sources

published · modified · JSON