https://deepquest.code511.com/blog/2023/04/webapps-kodexplorer-4-49-csrf-to-arbitrary-file-upload/