Pierre Lacombe

The issue is related to incorrect access control in the `AfficheExplorateurParam()` function, allowing a standard authenticated user to access administrative controllers.

The issue allows a standard authenticated user to browse the server filesystem due to a path traversal vulnerability in the file browser.

The issue allows an unauthenticated user to download arbitrary files from the server due to Path Traversal vulnerabilities in the images/Apparence and servletrecuperefichier endpoints. The `dossier` and `document` parameters are vulnerable to traversal attacks, enabling access to files outside the intended directory.

The issue concerns an Arbitrary File Upload problem in the file browser, allowing a standard authenticated user to upload a new WebApp WAR file to the Tomcat server via Path Traversal. This enables remote code execution with SYSTEM privileges.