DerScanner
Home / Vulnerability Database / Config files : Path traversal possible while using alias
Config files

Config files : Path traversal possible while using alias

Classification

OWASP Top 10 2021
A1-Broken Access Control
CWE
CWE-23CWE-35

Overview

An incorrect alias configuration may allow an attacker to read a file outside the target directory.

References

  1. Path traversal via misconfigured NGINX alias
  2. Path Traversal
LOW

DerScanner Severity Score

Do you want to fix Config files : Path traversal possible while using alias in your application?

See also

Config files

Config files : Text4Shell Vulnerability

Config files

Config files : Incorrect directory deletion

Config files

Config files : Code injection