When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higherCreditsThis issue was discovered by Jigang Dong of M1QLin Security TeamReferenceshttps://lists.apache.org/thread/pbdzqf9ntxyvs4cr0x2dgk9zlf43btz8http://www.openwall.com/lists/oss-security/2022/11/01/13