Authenticated arbitrary file write via folder traversal

Path traversal in eNMS 4.4.0 through 4.7.0 allows remote authenticated users to write files outside the intended upload directory. The /upload_files route accepts a user-controlled folder parameter and uses it as the destination without restricting traversal outside the upload root. A valid low-privilege session is required; crafted uploads can alter files writable by the service account, including SSH authorized_keys where permissions permit.