Path Traversal

pretalx is vulnerable to Path Traversal. The vulnerability exists in exportschedulehtml.py which allows an attacker to read arbitrary files by uploading crafted html documents...