Kirill89

The issue allows directory traversal, enabling the fetching of arbitrary files from the server. This is a significant security concern as it could lead to unauthorized access to sensitive data.

The issue arises from the unsafe handling of file names during upload using the `HttpFile::save()` method, potentially allowing attackers to write files to arbitrary locations outside the designated target folder.