imPC@ndo IT

Tracker / CVE-2019-10098

CVE-2019-10098

Medium 6.1

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.

Affected products and versions

apache http_server · 2.4.0 → 2.4.39

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References