gallery 2.4.0 suffers from a remote file disclosure vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47188/gallery2.4.0.txt
Source: https://packetstormsecurity.com/files/47188/gallery2.4.0.txt.html