Open Source ... and allows relative folders, JAR/EAR/WAR are potentially vulnerable. A file traversal attack aims to access files and directories that are stored outside the root folder.