WRITEUP

This patch addresses a path traversal vulnerability in the file upload functionality of the target software by sanitizing filenames before writing them to disk. The original code directly used user-provided filenames, allowing attackers to write files outside the intended directory.