For everybody running #nginx : time to check your 'location' directives in the config:
https://labs.hakaioffsec.com/nginx-alias-traversal/
https://labs.hakaioffsec.com/nginx-alias-traversal/
Hunting for Nginx Alias Traversals in the wild
Nginx, a versatile web server pivotal to numerous internet infrastructures, has held a dominant market share since its inception in 2004, with widespread adoption across websites and Docker containers.Daniel (Celesian) Matsumoto (Hakai Offensive Security)