[filegator/filegator] Path traversal in filegator

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0 for non-admin users. Files created with ..\ as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-1850
• https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989
• https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce
• https://github.com/advisories/GHSA-rrhw-54r8-545q