Directory Traversal

serve is vulnerable to directory traversals. The application does not properly handle %2e and %2f as characters, allowing a malicious user to gain access to arbitrary files in a restricted directory.