gregk4sec/cve-2025-31651-oProof-of-concept exploit for CVE-2025-31651, demonstrating bypass of security-enforcing rewrite rules via specially crafted requests in affected configurations.
For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed.
PUBLIC
