MB-R302
Server-side file processing, such as file decompression, ignores user-provided path information to prevent vulnerabilities such as zip slip.