Cpe:2.3:a:getformwork:formwork:*:*:*:*:*:*:*:*

Formwork prior to version 2.3.13 contains a path traversal vulnerability in the BackupController component allowing authenticated users to read or delete arbitrary files via base64-encoded payloads.