Document Vault · File Access

Approved Documents

The portal should serve files only from its approved public document area.

Manual testing is sufficient. Do not use directory brute-forcing tools.
Choose a document…

Objective: determine whether the file parameter can escape the intended public directory and retrieve an internal flag file.