Mahara path traversal vulnerability

Mahara is a social networking system. The system includes a blog, a resume builder, a file manager, etc. Mahara suffers from a security vulnerability that allows an attacker to bypass the intended access control to HTML files via directory traversal.