Summary by freebird
Unauthenticated restricted file read and out-of-tree file disclosure in GetVectorFile.php allowed access to server-side files outside the intended application scope, including protected application files and host OS information. The issue was validated through non-destructive PoC requests and has since been marked as Resolved by the program.