Tracker / CVE-2020-1927
CVE-2020-1927
Medium 6.1
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
Affected products and versions
| apache | http_server · 2.4.0 → 2.4.41 |
|---|---|
| broadcom | brocade_fabric_operating_system |
| canonical | ubuntu_linux |
| debian | debian_linux |
| fedoraproject | fedora |
| netapp | oncommand_unified_manager_core_package |
| opensuse | leap |
| oracle | communications_element_manager |
| oracle | communications_session_report_manager |
| oracle | communications_session_route_manager |
| oracle | enterprise_manager_ops_center |
| oracle | instantis_enterprisetrack · 17.1 → 17.3 |
| oracle | sd-wan_aware |
| oracle | zfs_storage_appliance_kit |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.