CVE-2025-50735

NextChat (versions up to 2.16.0) is affected by a directory traversal vulnerability in the WebDAV proxy, which fails to canonicalize or reject dot path segments in its catch-all route, potentially allowing an attacker to disclose sensitive information via authenticated or anonymous WebDAV endpoin...