Merge pull request from GHSA-5vpv-xmcj-9q85

Co-authored-by: Fabrizio Balliano <[email protected]>

Author: colinmollenhour

app/code/core/Mage/Cms/Model/Wysiwyg/Images/Storage.php

@@ -233,6 +233,11 @@ public function deleteDirectory($path)
                 $io->getFilteredPath($path)
             ));
         }
+        if (strpos($pathCmp, chr(0)) !== false
+            || preg_match('#(^|[\\\\/])\.\.($|[\\\\/])#', $pathCmp)
+        ) {
+            throw new Exception('Detected malicious path or filename input.');
+        }
 
         if (Mage::helper('core/file_storage_database')->checkDbUsage()) {
             Mage::getModel('core/file_storage_directory_database')->deleteDirectory($path);