Bonita BPM 6.5.1 Directory Traversal / Open Redirect

Bonita BPM version 6.5.1 suffers from open redirect and directory traversal vulnerabilities.