Security Advisory
CVE-2025-59775
7.5
HIGH
Vulnerability Description
Server-Side Request Forgery (SSRF) vulnerability
in Apache HTTP Server on Windows
with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM
hashes to a malicious server via SSRF and malicious requests or content
Users are recommended to upgrade to version 2.4.66, which fixes the issue.
Published Date
December 5, 2025
Official Source
NIST NVD Advisory