Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-22,
Products Affected
