Path Traversal in the file browser of DIMO YellowBox CRM prior to 6.3.4 allows a standard authenticated user to browse the server filesystem.
dimo-crm yellowbox crm