The Cprime Power Scripts app prior to 4.0.14 for Atlassian Jira allows Directory Traversal.
cprime power scripts