Passwork On-Premise Edition prior to 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).
passwork passwork