description: In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
problem types: mod_rewrite CWE-601 open redirect
affected:
{
product: Apache HTTP Server
vendor: Apache
versions:
status: affected, version: 2.4.0 to 2.4.41
}