3 matches found
Nginx Off-By-Slash
When a Nginx directive does not end with a slash, it is possible to traverse one step up. This incorrect configuration could allow an attacker to read file stored outside the target folder. No source data...