CVE-2023-27881

A user could use the “Upload Resource” functionality to upload files to any location on the disk...