How a 12-Year-Old Path Traversal Flaw Went Unnoticed