CVE-2007-1860

CVE-2007-1860 describes a directory traversal vulnerability in mod_jk, the Apache Tomcat JK Web Server Connector, affecting versions 1.2.x prior to 1.2.23. This flaw allows remote attackers to bypass access controls and potentially access protected pages by crafting URLs that exploit how mod_jk decodes requests before passing them to Tomcat. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, potentially leading to information disclosure. While the EPSS score indicates a higher than average exploitability probability for its age, there is no known exploit code available in common databases like Metasploit or ExploitDB, and it shows no evidence of active exploitation or significant community discussion.