CVE-2023-29152

By changing the filename parameter in the request, an attacker could
delete any file with the permissions of the Vuforia server account.

Source: CVE-2023-29152