79791611

Date: 2025-10-15 21:24:04
Score: 3
Natty:
Report link

Instead of:

location /api/img {
   proxy_pass http://service/;
}

do

location /api/img {
   proxy_pass http://service;
}

https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass
https://joshua.hu/proxy-pass-nginx-decoding-normalizing-url-path-dangerous#vulnerable-proxy_pass-configuration

Reasons:
  • Probably link only (1):
  • Low length (1):
  • Has code block (-0.5):
  • Unregistered user (0.5):
  • Low reputation (1):
Posted by: cluelesspentester