CVE-2017-16092
Sencisho is affected by a directory traversal vulnerability (CVE-2017-16092). The issue allows an attacker to access the filesystem by placing relative paths like ../ in the URL. The GitHub advisory GHSA-6866-X7CF-RMH5 notes affected versions and provides the example request to access /../../../....