Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and previous versions allow remote malicious users to obtain local files via unspecified vectors.
ipa appgoat