VDB
CVE-2024-43394
CVE-2024-43394
PUBLISHED
Apache HTTP Server: SSRF on Windows due to UNC paths
EPSS 0.24% · 47.7th percentile
Risk Scores
EPSS Score
0.24%
47.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | apache | 2.4.0 |
| Bitnami | apache | 2.4.0, 2.4.0, 2.4.0 |
Timeline
- Jul 10, 2025 Coalition ESS Score
- Jul 10, 2025 CVE Published
- Jul 11, 2025 EPSS Score
- Jul 15, 2025 Coalition ESS Score
- Jul 16, 2025 Coalition ESS Score
- Jul 20, 2025 EPSS Score
- Jul 29, 2025 Coalition ESS Score
- Jul 30, 2025 EPSS Score
- Aug 8, 2025 EPSS Score
- Aug 18, 2025 EPSS Score
- Aug 27, 2025 EPSS Score
- Sep 5, 2025 EPSS Score
References
- https://httpd.apache.org/security/vulnerabilities_24.html url
- https://nvd.nist.gov/vuln/detail/CVE-2024-43394 url
- http://www.openwall.com/lists/oss-security/2025/07/10/2 url
- http://www.openwall.com/lists/oss-security/2025/07/10/5 url
- https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html url
- Multiples vulnérabilités dans Apache HTTP Server advisory