Carnet technique
du terrain.

path.join() Is Not Path Validation: A Next.js Traversal Walkthrough

Exploiting an unsanitized file path parameter in OopsSec Store's documents API to read files outside the intended directory and retrieve a flag. The OopsSec Store expo...