Apache mod_rewrite open redirect (CVE-2019-10098)

Summary

Weaknesses in mod_rewrite regular expressions allow for open redirect attacks.

Vulnerability ID	Vulnerability Overview
CVE-2019-10098	Misconfigured RewriteRule patterns in Apache can be exploited to bypass domain restrictions, redirecting users to malicious external URLs.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices