Wind River Support Network

HomeDefectsLIN1021-19840
Fixed

LIN1021-19840 : Security Advisory - apache2 - CVE-2025-59775

Created: Dec 8, 2025    Updated: Jun 8, 2026
Resolved Date: Jun 8, 2026
Found In Version: 10.21.20.1
Fix Version: 10.21.20.27
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Server-Side Request Forgery (SSRF) vulnerability [EOL][EOL]Â\xa0in Apache HTTP Server on Windows [EOL][EOL]with AllowEncodedSlashes OnÂ\xa0and MergeSlashes OffÂ\xa0 allows to potentially leak NTLM [EOL]hashes to a malicious server via SSRF and malicious requests or content[EOL][EOL]Users are recommended to upgrade to version 2.4.66, which fixes the issue.

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube