UpHeron
All vulnerabilities

Servers and applications

CVE-2019-0220

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.

Severity
Medium 5.3
Published
11 Jun 2019
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.4.0 up to 2.4.38

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-0220
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-0220