CVE-2017-15715

CVE-2017-15715 is a high-severity vulnerability affecting Apache httpd versions 2.4.0 to 2.4.29, where a flaw in the <FilesMatch> directive allows attackers to bypass filename restrictions by matching the '$' character to a newline in malicious filenames. This could lead to unauthorized file uploads in environments relying on trailing filename matching for security. With a CVSS score of 8.1 (High) and an EPSS score indicating high exploitability, this vulnerability presents a significant risk, potentially allowing for high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Nuclei template exists for arbitrary file upload, and it has garnered significant community discussion and media coverage, suggesting awareness and potential for exploitation.