Path traversal in the images controller (see GHSA-mrvp-7wmx-5m4h)

PKSA-2s8k-hn9c-bkvy

Affected package: contao/contao

Affected version: >=5.0.0,<5.3.50|>=5.4.0,<5.7.12

Reported by:
FriendsOfPHP/security-advisories