Contao Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2015-0269
Directory traversal vulnerability in Contao before 3.2.19 and 3.4.x before 3.4.4 allows remote authenticated quotback endquot users to view files outside their file mounts or the document root via unspecified vectors.