Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer

{
                    "vendor": "intranda",
                    "product": "goobi-viewer-core",
                    "versions": [
                        {
                            "version": ">= 24.03, < 26.05",
                            "status": "affected"
                        }
                    ]
                }