Launchpad.net

CVE 2019-18951

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

See the CVE page on Mitre.org for more details.