Tagged articles

Path Normalization

3 articles · Page 1 of 1

Jun 2, 2021 · Backend Development

Spring Boot %2e Path Normalization Trick and Authentication Bypass in Versions ≤2.3.0.RELEASE

The article explains how Spring Boot versions up to 2.3.0.RELEASE normalize request paths—including decoding %2e and handling directory traversal—which can be exploited to bypass authentication, and shows the code differences that cause this behavior in newer releases.

Authentication BypassJavaPath Normalization

0 likes · 9 min read

Spring Boot %2e Path Normalization Trick and Authentication Bypass in Versions ≤2.3.0.RELEASE

Programmer DD

May 23, 2021 · Backend Development

Why %2e Path Normalization in Spring Boot ≤2.3.0 Lets Attackers Bypass Authentication

This article explains how Spring Boot versions up to 2.3.0.RELEASE normalize URLs containing the %2e sequence, causing servlet path handling that can be exploited to bypass authentication, and shows why the behavior changes in later releases.

Authentication BypassPath NormalizationSpring Boot

0 likes · 10 min read

Why %2e Path Normalization in Spring Boot ≤2.3.0 Lets Attackers Bypass Authentication

Laravel Tech Community

Jul 30, 2020 · Backend Development

PHP realpath() Function: Description, Parameters, Return Value, and Examples

This article explains PHP's realpath() function, detailing its purpose of returning a normalized absolute pathname, describing its parameters and return values, and providing two practical code examples that demonstrate path resolution on Unix and Windows systems.

FilesystemPHPPath Normalization

0 likes · 2 min read

PHP realpath() Function: Description, Parameters, Return Value, and Examples