In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox
CWE-23, CWE-22