CVE-2019-10098observed exploitationCWE-601

CVE-2019-10098

82Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 74%

from disclosure to weapon19 days

Published on NVDSep 25

1st PoC+19d

VulnCheck+881d

exploitation probability

74%top 1% of all CVEs

observed exploitation

yesVulnCheck

1 public exploit(s)

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.

Affected products

n/a · Apache HTTP Server

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/47689unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References