1 matches found
PT-2026-83662
The issue is that the function normalizes the URI path before percent decoding it: OCaml let resolve local file docroot uri = let path = Uri.pct decode path resolve "http" of string "/" uri in ... Because %2f is decoded after Uri.resolve, encoded separators survive dot-segment normalization. For...
8.7CVSS5.9AI score
SaveExploits0References1
20