CVE-2002-2427: GoAhead Webserver

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.

Affected products

• GoAhead GoAhead Webserver: up to and including 2.1; version 2.0 only

Published 2009-02-06. Last modified 2026-06-16.