A software system that accepts input in the form of dot dot slash ('../') without appropriate validation can allow an attacker to traverse the file system to access an arbitrary file. Note that '..' is ignored if the current working directory is the root directory.