CVE-2007-3949
lighttpd lighttpd: no CVSS score yet. EPSS 3.3% chance of exploitation in the next 30 days.
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.
- EPSS
- 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lighttpd:lighttpd