T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6513
No PoCs found on GitHub currently.