writeups.xyz / Hunting for Nginx Alias Traversals in the wild

Submitter : c2a

Date: 3 July 2023

Bounty : 6,500

Vulnerabilities :

• Path Traversal

Programs :

• Bitwarden
• Google

Authors :

• Daniel (Celesian) Matsumoto (@C3l3si4n)

Link :
https://labs.hakaioffsec.com/nginx-alias-traversal/