Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory.

Read the full article at SecurityWeek →