CVE-2020-25734

webTareas through 2.1 allows files/Default/ Directory Listing.