CVE-2002-1156: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 14.9% chance of exploitation in the next 30 days.

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled.

Affected products

  • Apache HTTP Server: version 2.0.42 only

Published 2002-10-11. Last modified 2026-06-16.