Passwork On-Premise Edition prior to 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).
passwork passwork