An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')