UpHeron
All vulnerabilities

Servers and applications

CVE-2019-10098

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.

Severity
Medium 6.1
Published
25 Sept 2019
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.4.0 up to 2.4.39

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-10098
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-10098