Relative Path Traversal in jitsi/jicofoValid
Nov 15th 2021
misconfigurations of nginx lead to a path traversal vulnerability.
Proof of Concept
a request to
/shibboleth-sp../ can get any file under
An attacker can access files on the web server to which they should not have access.