Change Details

Since Apache 2.4.61 including https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/mappers/mod_rewrite.c?r1=1918560&r2=1918561&pathrev=1918561&diff_format=h due to https://www.cve.org/CVERecord?id=CVE-2024-38474, URIs including %3F throw a HTTP 403 error and the following error log entry: `AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F` Update the corresponding RewriteRule in the Phorge configuration guide to explicitly set UnsafeAllow3F. Closes T15889

Since Apache 2.4.61 including https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/mappers/mod_rewrite.c?r1=1918560&r2=1918561&pathrev=1918561&diff_format=h due to https://www.cve.org/CVERecord?id=CVE-2024-38474, URIs including %3F throw a HTTP 403 error and the following error log entry: `AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F` Update the corresponding RewriteRule in the Phorge configuration guide to explicitly set UnsafeAllow3F. https://httpd.apache.org/docs/2.4/rewrite/flags.html#flag_unsafe_allow_3f Closes T15889

Since Apache 2.4.61 including https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/mappers/mod_rewrite.c?r1=1918560&r2=1918561&pathrev=1918561&diff_format=h due to https://www.cve.org/CVERecord?id=CVE-2024-38474, URIs including %3F throw a HTTP 403 error and the following error log entry: `AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F` Update the corresponding RewriteRule in the Phorge configuration guide to explicitly set UnsafeAllow3F. https://httpd.apache.org/docs/2.4/rewrite/flags.html#flag_unsafe_allow_3f Closes T15889