A red-team report shows that a user-controlled file path allows reading files outside an intended upload directory. What is the primary weakness?

1. Cross-site request forgery
2. DNS cache poisoning
3. Session replay
4. Path traversal