Description
When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbitrary file write on the server.
References
github.com/....24.4/server/router/api/v1/resource_service.go
www.sonarsource.com/...s-with-sonarqube-real-world-examples/
