Directory Traversal

yard is vulnerable to directory traversal attacks. The attacker can read any arbitrary file by passing relative paths with an initial ../ sequence to lib/yard/coreext/file.rb...