Citrix XenServer 7.1 and newer allows Directory Traversal.Referenceshttp://xenbits.xen.org/xsa/advisory-271.htmlhttp://www.securityfocus.com/bid/105110https://support.citrix.com/article/CTX236548
