Get Demo
Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the template parameter.