CVE-2020-1927 - AskarLabs CVE Database

CVE-2020-1927

Vendor Apache

Product Apache HTTP Server

Weakness CWE-601 · Open redirect

Published April 1, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.

Key dates

02Disclosure timeline

April 1, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-1927 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/601.html

Related vulnerabilities

04Related CVE

CVE-2024-45082 IBM Cognos Analytics HTTP open redirection CVE-2025-24868 Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services) CVE-2026-28301 SolarWinds Observability Self-Hosted Open Redirect Vulnerability CVE-2026-1296 Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter CVE-2021-25655 URL redirection to untrusted site possible in Avaya Aura Experience Portal