Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server.
CWE-22, CWE-22