CVE-2020-15923

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.