Summary by golfhackerdave Arbitrary Server Side forward allows attacker to access unauthorized application files.