Beveiligingsadvies

CVE-2025-59775

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-05 10:17:03
Laatst bijgewerkt 2025-12-05 19:28:44
Toegewezen door apache
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Server-Side Request Forgery (SSRF) vulnerability  in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off  allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.