A directory traversal issue exists when wild card repositories and a pattern matching "../" are enabled, allowing remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a `repository name`.