Relative Path Traversal (CWE-23) in chunked uploads in oneup/uploader-bundle

Impact The vulnerability was identified in the web service for a chunked file upload. While the names of the POST parameters vary with the used frontend, their values are always used in the same way to build a path where the chunks are stored and assembled temporarily. By not validating these...