Tracker / CVE-2019-0220
CVE-2019-0220
Medium 5.3
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.
Affected products and versions
| apache | http_server · 2.4.0 → 2.4.38 |
|---|---|
| canonical | ubuntu_linux |
| debian | debian_linux |
| fedoraproject | fedora |
| opensuse | leap |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.