Path Traversal

Grav is vulnerable to Path Traversal. The vulnerability is due to insufficient validation of directory paths in MediaUploadTrait::deleteFile, which allows an authenticated attacker with media management permissions to use ../ sequences to delete arbitrary files outside the intended media storage...