Today’s SY0-701 CompTIA Security+ Pop Quiz: It won’t stop moving

An attacker is attempting to move out of the standard web root folder to access sensitive configuration files in a different subdirectory. What is the name of this application vulnerability?