Vulnerability Fixation
Path Traversal Attack

Path Traversal, also known as Directory Traversal, is a critical security vulnerability that allows attackers to access files and directories stored outside the intended directory. This can expose sensitive system files, application configurations or even user data, leading to severe security risks.

This exposes the system to replay and automation attacks, where attackers can capture and reuse the same OTP to gain unauthorized access. To prevent this, OTPs should be generated securely on the server side, tied to a specific session or user, and validated only once with proper expiration controls.