bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')