Request URL Override

Exploit using

X-Rewrite-URL: /xx/yy

Header