Description
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
Remediation
References
Related Vulnerabilities
Piwigo Improper Access Control Vulnerability (CVE-2016-10084)
WordPress Plugin Login Logout Menu Multiple Cross-Site Scripting Vulnerabilities (1.3.3)
MySQL CVE-2022-21278 Vulnerability (CVE-2022-21278)
PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0441)
WordPress Plugin WP Statistics Cross-Site Scripting (12.0.5)