JBoss Web Server DeploymentFileRepository class directory traversal

setBaseDir class function doesn't check base dir outside root application directory...