Arbitrary File Read via Image Import

«Fixed an arbitrary file read vulnerability in the import() function that could allow unauthorized access to server files (information disclosure). This vulnerability affects the following application versions: ...»