CVE-2024-38472
HIGH NUCLEIApache HTTP Server 2.4.0-2.4.59 - Server-Side Request Forgery via UNC Path Handling
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-38472. PoCs published by mrmtwoj, Abdurahmon3236. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python script that scans for multiple Apache HTTP Server vulnerabilities by sending crafted HTTP requests to detect potential misconfigurations or weaknesses. It does not include exploit code for achieving RCE or other offensive actions, only detection logic.
Description
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
Exploits (2)
This repository contains a Python script that scans for multiple Apache HTTP Server vulnerabilities by sending crafted HTTP requests to detect potential misconfigurations or weaknesses. It does not include exploit code for achieving RCE or other offensive actions, only detection logic.
The repository contains a functional Metasploit module for CVE-2024-38472, which exploits an SSRF vulnerability in Apache HTTP Server on Windows to achieve RCE by interacting with internal services. The module includes a check method to verify the target and an exploit method to send a crafted SSRF request.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N