nginx

nginx alias misconfiguration allowing path traversal

11 minute read

I recently came across an nginx server that had a vulnerable alias configuration which allowed anyone to read files outside the intended directory. In the fo...