CVE-2011-4963

score

<0.1

cvss

5.0

epss

6.0%

published

2012-07-26

kev added

—

first seen

2026-10-21

nginx/Windows versions 1.3.x before 1.3.1 and 1.2.x before 1.2.1 contain a security bypass caused by improper handling of trailing dots and $index_allocation sequences in requests, letting remote attackers access restricted files, exploit requires sending specially crafted requests.