plone file system information disclosure vulnerability

Plone is a free, open source Content Management System CMS. An information disclosure vulnerability exists in the plone file system. An attacker could exploit this vulnerability to read data on a target machine running plone by using relative paths and guessing the location of the Plone server...