Lucene search

K
redhatcveRedhat.comRH:CVE-2019-0220
HistoryApr 02, 2019 - 11:19 a.m.

CVE-2019-0220

2019-04-0211:19:54
redhat.com
access.redhat.com
41

0.007 Low

EPSS

Percentile

80.9%

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes (‘/’), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.

Mitigation

This flaw can be mitigation by replacing multiple consecutive slashes, used in directives that match against the path component of the request URL with regular expressions.