Description
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
Remediation
References
Related Vulnerabilities
IBM RTC Generation of Error Message Containing Sensitive Information (CVE-2020-4487)
Internet Information Services Other Vulnerability (CVE-1999-1233)
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-58182)
Jboss EAP Improper Input Validation Vulnerability (CVE-2011-4575)