Arbitrary file write via upload path traversal

Path traversal in Progress ShareFile Storage Zones Controller before 5.12.6 allows remote authenticated users to write arbitrary files. The resumable upload initiation endpoint accepts an attacker-controlled upload path or filename and resolves traversal sequences without confining the destination to the intended upload directory. Exploitation requires valid zone credentials and reaches any filesystem location writable by the service account; code execution follows only if a written file is later loaded or executed.