CVE-2007-0450

CVE-2007-0450 describes a directory traversal vulnerability affecting Apache HTTP Server and Tomcat versions 5.x before 5.5.22 and 6.x before 6.0.10, specifically when using proxy modules like mod_proxy, mod_rewrite, or mod_jk. Attackers can exploit this by crafting URLs with “..” sequences combined with various slash and backslash characters, which Tomcat interprets differently than Apache, leading to unauthorized file access. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially allowing remote attackers to read arbitrary files. While not listed on CISA’s KEV catalog, an exploit is available on ExploitDB, and its EPSS score suggests a high probability of exploitation. Despite this, there is no recorded community discussion or media coverage, indicating low public awareness.