Description
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simpel Reserveren 3 Cross-Site Scripting (3.5.2)
WordPress Plugin Mongoose Page Cross-Site Scripting (1.8.3)
WordPress Plugin YITH WooCommerce Product Bundles Security Bypass (1.1.15)
WordPress Plugin Ultimate Membership Pro SQL Injection (6.4)
OpenSSL Integer Overflow or Wraparound Vulnerability (CVE-2021-23840)