CVE-2002-1238: Peter Sandvik Simple Web Server

High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days.

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.

Affected products

• Peter Sandvik Simple Web Server: up to and including 0.5.1

Published 2002-11-12. Last modified 2026-06-16.