Arbitrary file read using percent-encoded relative paths in FileMiddleware
ImpactAttackers can access data at arbitrary filesystem paths on the same host as an application using `FileMiddleware`.PatchesVersion [4.29.4](https://github.com/vapor/vapor/releases/tag/4.29.4)WorkaroundsUpgrade to 4.24.4 or later, or disable `FileMiddleware`.ReferencesIntroduced in https://github.com/vapor/vapor/pull/2223Fixed by https://github.com/vapor/vapor/pull/2500For more informationIf you have any questions or comments about this advisory:Open [an issue](https://github.com/vapor/vapor/issues)Email us at [security@vapor.codes](mailto:security@vapor.codes)