CVE-2024-38292: Improper Limitation of a Pathname to a Restricted Directory

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation...