Stefan Michlits

The issue allows directory traversal to read arbitrary files on the filesystem, even files that require root privileges, via the `/wlmdeu%2f%2e%2e%2f%2e%2e` endpoint. This is due to an incomplete fix for a previous issue.

The issue allows a denial of service (service outage) via the "/wlmdeu%2f%2e%2e%2f%2e%2e" endpoint followed by a directory reference such as "%2fetc%00index.htm" to try to read the /etc directory.

The issue allows identification of valid user accounts via username enumeration. This occurs because the system returns a "nicht einloggen" error rather than a "falsch" error when an attempt is made to access an account.