By adding . or … to the path it's possible to obtain directory listing.
vulners.com/securityvulns/securityvulns:doc:3167