CVE-2019-10098
MEDIUM EXPLOITED NUCLEIApache HTTP Server 2.4.0-2.4.39 - Open Redirect via Encoded Newlines in mod_rewrite
Title source: llmExploitation Summary
CVE-2019-10098 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Sebastian Neef. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a URL redirection vulnerability (CVE-2019-10098) where newline characters (%0a) in the URL path can bypass intended redirection logic, allowing an attacker to redirect users to arbitrary domains. The provided curl command shows the vulnerability in action, with the server responding with a 302 redirect to an unintended domain.
Description
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.
Exploits (1)
This exploit demonstrates a URL redirection vulnerability (CVE-2019-10098) where newline characters (%0a) in the URL path can bypass intended redirection logic, allowing an attacker to redirect users to arbitrary domains. The provided curl command shows the vulnerability in action, with the server responding with a 302 redirect to an unintended domain.
Nuclei Templates (1)
cpe:"cpe:2.3:a:apache:http_server" || apache 2.4.49
References (17)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N