A software system that accepts path input in the form of
trailing slash ('filedir/') without appropriate validation can lead to ambiguous
path resolution and allow an attacker to traverse the file system to unintended
locations or access arbitrary files.
Failure to handle filename request with trailing
"/" causes multiple consequences, including server crash and a Visual Basic
error message that enables XSS and information
leak.
Description
