In September, researchers discovered a “critical severity” directory traversal vulnerability in Atlassian’s Jira Service Desk Server. Adobe rushed out a fix for three vulnerabilities in its ColdFusion web development platform. Attackers could also use the information they glean from the tickets for social engineering. Path traversal was one of the top three attacks in August, after SQL injection and cross-site scripting, according to a report by MITRE. Developers should avoid storing sensitive data in the web root of the application.”]