CVE

CVE-2017-15715

8.1

CVSS

Description

In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.

Attack Vector

Privileges Req.

User Interaction

apache http server

Updated Sep 23, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~15 seconds

CVE-2017-15715 Scanner

CVE-2017-15715 scanner - Improper Input Validation vulnerability in Apache Software Foundation Apache HTTP Server

Used 2.6k times · 2 assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: apache http server

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →