svn propchange: r1927041 - svn:log

[co...@apache.org]

Author: covener
Revision: 1927041
Modified property: svn:log

Modified: svn:log at Thu Jul 10 17:25:06 2025
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Thu Jul 10 17:25:06 2025
@@ -1,5 +1,20 @@
 backport 1927033 from trunk
 
-  expand UNC checking
+  *) SECURITY: CVE-2024-43394: Apache HTTP Server: SSRF on Windows
+     due to UNC paths (cve.mitre.org)
+     Server-Side Request Forgery (SSRF) in Apache HTTP Server on
+     Windows allows to potentially leak NTLM hashes to a malicious
+     server via
+     mod_rewrite or apache expressions that pass unvalidated request
+     input.
+     This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63.
+     Note:  The Apache HTTP Server Project will be setting a higher
+     bar for accepting vulnerability reports regarding SSRF via UNC
+     paths.
+     The server offers limited protection against administrators
+     directing the server to open UNC paths.
+     Windows servers should limit the hosts they will connect over
+     via SMB based on the nature of NTLM authentication.
+     Credits: Kainan Zhang (@4xpl0r3r) from Fortinet
 
 Reviewed By: covener, jfclere, rpluem