Description
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
Remediation
References
Related Vulnerabilities
WordPress Plugin Migration, Backup, Staging-WPvivid SQL Injection (0.9.52)
WebLogic CVE-2020-14644 Vulnerability (CVE-2020-14644)
Drupal Core 6.x Security Bypass (6.0 - 6.35)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5625)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7449)