CVE-2001-1072
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass...
CVE-2001-1072 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published August 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.11%, the 90th percentile. No source names a fixed version.
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
Exploit likelihood
What each source reports
NVD Score used
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
- Record
CVE-2001-1072- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
- Record
CVE-2001-1072- Updated
- 2026-11-02
EUVDEUVD-2001-1053 No score
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
- Record
EUVD-2001-1053- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2vjr-23vj-3cq8 No score
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass...
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
- Record
GHSA-2vjr-23vj-3cq8- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |