Apache HTTP Server Vulnerability: Self-Referential Redirects Exploitation
Summary
UBUNTU-CVE-2019-10098: In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. Affects apache2 versions 2.4.6-2ubuntu2 – 2.4.7-1ubuntu4.9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Apache HTTP Server is a widely used open-source web server software that enables the hosting of websites and applications. It is known for its flexibility, security features, and extensive module support. However, certain versions of Apache have a vulnerability that affects how redirects are handled, potentially leading to unexpected behavior and security risks.
Vulnerability Detail
In Apache HTTP server versions 2.4.0 to 2.4.39, a vulnerability exists in the mod_rewrite module. Redirects that are intended to be self-referential can be manipulated by encoded newlines, causing the server to redirect to an unintended URL within the request. This can lead to security issues such as open redirects, which may be exploited by attackers to redirect users to malicious sites.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can disable the use of mod_rewrite for redirects until the server is updated. This can be done by commenting out or removing the relevant rewrite rules in your Apache configuration files.
Conclusion
The vulnerability in Apache HTTP Server versions 2.4.0 to 2.4.39 poses a significant risk due to the potential for open redirects. It is crucial to update to a patched version to mitigate this risk. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for apache2 →
FAQ
Apache HTTP Server versions 2.4.0 to 2.4.39 are affected by this vulnerability.
Exploitation of this vulnerability can lead to open redirects, which may allow attackers to redirect users to malicious websites.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Yes, the CVSS score for this vulnerability is 6.1, indicating a medium level of severity.
If you cannot update immediately, consider disabling mod_rewrite for redirects as a temporary workaround until you can apply the patch.
Related vulnerabilities
Recent vulnerabilities recorded for apache2.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
