Description
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.
Remediation
References
Related Vulnerabilities
WordPress Plugin Page Showcaser Boxes Cross-Site Scripting (1.1)
WordPress Plugin WP SEO Redirect 301 Cross-Site Request Forgery (2.3.1)
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
Apache HTTP Server CVE-2004-0809 Vulnerability (CVE-2004-0809)
Craft CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-3814)