httpd rewrite rejects request with space or special character after CVE-2023-25690 update
Issue
- We recently updated httpd. After this, we are seeing requests with spaces or special characters getting a 403 response when matching a proxying rewrite rule. An error like below is logged:
[rewrite:error] [pid 21740] [client 127.0.0.1:50000] AH10410: Rewritten query string contains control characters or spaces
Environment
- Red Hat Enterprise Linux (RHEL)
- Apache httpd
- httpd-2.4.6-98.el7_9.7.x86_64+
- httpd-2.4.37-51.module+el8.7.0+18499+2e106f0b.5.x86_64+
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
