NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
Published July 25, 2021.
Nchsoftware Ivm Attendant