A security analyst reviews a penetration test report for a web-based document portal. The tester demonstrated that by submitting a request such as GET /download?file=../../../../etc/passwd, they retrieved the contents of a system file located outside the intended document directory. Which vulnerability class does this finding represent?