Description
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
Remediation
References
Related Vulnerabilities
Python Cryptographic Issues Vulnerability (CVE-2013-7040)
Apache Tomcat CVE-2023-34981 Vulnerability (CVE-2023-34981)
Oracle JRE CVE-2013-5789 Vulnerability (CVE-2013-5789)
WordPress Plugin Connections Business Directory Unspecified Vulnerability (10.4.7)
WordPress Plugin Custom Global Variables Cross-Site Scripting (1.0.5)