Reverse Proxy


By @aLLy¬†, Wallarm Research There was a very interesting vulnerability discovered in nginx, one of the most popular web/proxy/load balancing servers. This vulnerability leaks information about the application behind the nginx proxy. For example, a specially formed request can retrieve information on the internal structure of an application and/or its IP address. Turns out this issue has been around for all of ten years and the vulnerability affects versions of nginx as early as 0.5.6…