CVE-2001-0731: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 56.8% chance of exploitation in the next 30 days.

Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.

Affected products

• Apache HTTP Server: version 1.3.20 only

Published 2001-10-01. Last modified 2026-06-16.