CVE-2023-0092: Improper Limitation of a Pathname to a Restricted Directory

An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem...