A path traversal vulnerability exists in Dreampie Resty versions up to 1.3.1.SNAPSHOT in the HttpClient module's Request function. This flaw allows remote attackers to manipulate the filename argument to access unauthorized file system paths. The vulnerability is complex to exploit and requires high attack complexity. Public exploit details have been disclosed, but no vendor response or patch is currently available.