[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <1585745652.JFUZVINU@httpd.apache.org>
Date: Wed, 01 Apr 2020 07:54:12 -0500
From: Daniel Ruggeri <druggeri@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect
CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect
Severity: Low
Vendor: The Apache Software Foundation
Versions Affected:
httpd 2.4.0 to 2.4.39
Description:
Apache HTTP Server 2.4.0 to 2.4.41
Redirects configured with mod_rewrite that were intended to be self-referential
might be fooled by encoded newlines and redirect instead to an an unexpected
URL within the request URL.
Note: This is the same defect as CVE-2019-10098. The fix for CVE-2019-10098 was
ineffective.
Mitigation:
Anchor captures used as back-references, prefix self-referential redirects with
/ or scheme, host, and port.
Credit:
The issue was discovered by Fabrice Perez
References:
https://httpd.apache.org/security/vulnerabilities_24.html
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
