jc21 Nginx Proxy Manager prior to 2.0.13 allows %2e%2e%2f directory traversal.
jc21 nginx proxy manager