CVE-2019-17538: Improper Limitation of a Pathname to a Restricted Directory

Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring...