By using ./ and …/ it's possible to access any files.
vulners.com/securityvulns/securityvulns:doc:2538
vulners.com/securityvulns/securityvulns:doc:2820
vulners.com/securityvulns/securityvulns:doc:2822