Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests prior to 1.6.1.
etherpad etherpad