Authorization Bypass

armeria is Authorization Bypass. The vulnerability exists because the library does not properly remove matrix variables from the path on the server side when the library calls the spring controller via TomcatService or JettyService, which allows an attacker to bypass the authorization mechanism by sending a malicious request such as /important;a=b/resources