CVE-2015-4085: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1...