Information Disclosure

melisplatform/melis-asset-manager is vulnerable to information disclosure. The vulnerability is due to the displayFile function not properly checking whether the requested file is outside the restricted directory, allowing an attacker to read arbitrary files...