Nginx - Alias Misconfiguration — Root-Me

Nginx - Alias Misconfiguration — Root-Me

Root-Me — Web - Server · Nginx - Alias Misconfiguration

For Nginx - Alias Misconfiguration, the backend trusts headers and cookies too much. Notes document forging internal requests, bypassing auth middleware, and reaching a management route.