Authenticated arbitrary file write via upload path traversal

Path traversal in zdh_web 5.6.17 and earlier allows remote authenticated users to write arbitrary server files through file uploads. Upload handlers in ZdhEtlController, ZdhSshController, ZdhUnstructureController, and CrowdFileController used MultipartFile.getOriginalFilename() directly when constructing destination paths, so supplied path components escaped the intended upload directory. Access to an affected upload function is required; writes run with the zdh_web process permissions and can overwrite files, enabling privilege escalation, code execution, or a service interruption.