Felipensp

The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a specific Range HTTP header with an offset equal to the file size.

The issue allows remote attackers to bypass access restrictions via a crafted URI. This can be achieved by using an encoded forward slash in the URI.