Path traversal in UploadProfilePictureAction.java

            if (shouldResizeImage(image))
            {
                TemporaryProfilePicture temporaryProfilePicture = new TemporaryProfilePicture(uploadedFile.getFile(), uploadedFile.getFileName(), new File(BootstrapUtils.getBootstrapManager().getFilePathProperty(ConfluenceBootstrapConstants.TEMP_DIR_PROP)), getRemoteUser().getName());
                //noinspection unchecked
                getSession().put(SessionKeys.TEMPORARY_UPLOADED_PROFILE_PIC, temporaryProfilePicture);
                return "resize";
            }

    public TemporaryProfilePicture(File sourceFile, String imageFileName, File confluenceTempDirectory, String owningUserName) throws IOException
    {
        this.confluenceTempDirectory = confluenceTempDirectory.getAbsolutePath();

        String fileroot = makeFileRoot(owningUserName);
        copyOriginalFile(sourceFile, imageFileName, fileroot);
        makeThumbnailIfNecessary(sourceFile, imageFileName, fileroot);
    }
...
    private void copyOriginalFile(File sourceFile, String imageFileName, String fileroot) throws IOException
    {
        originalFileName = fileroot + "pp-" + imageFileName;
        FileUtils.copyFile(sourceFile, getOriginalFile());
        getOriginalFile().deleteOnExit();
    }

    private void makeThumbnailIfNecessary(File sourceFile, String imageFileName, String fileroot) throws IOException
    {
        // The mime type is not being used by Thumber right now, but we might as well use the proper one.
        Thumber thumber = new Thumber(Thumbnail.MimeType.PNG);
        Image sourceImage = thumber.getImage(sourceFile);

        sourceHeight = sourceImage.getHeight(null);
        sourceWidth = sourceImage.getWidth(null);

        if (sourceHeight > MAX_SIDE_LENGTH || sourceWidth > MAX_SIDE_LENGTH)
        {
            thumbnailFileName = fileroot + "pp-t-" + imageFileName;

            Thumber.WidthHeightHelper dimensions = thumber.determineScaleSize(800, 800, sourceWidth, sourceHeight);
            thumbnailWidth = dimensions.getWidth();
            thumbnailHeight = dimensions.getHeight();

            BufferedImage scaledImage = thumber.scaleImage(sourceImage, dimensions);
            ImageIO.write(scaledImage, "png", getThumbnailFile());
            getThumbnailFile().deleteOnExit();
        }


...
    private String makeFileRoot(String owningUserName)
    {
        return owningUserName + "-" + (int)(Math.random() * 100000) + "-";
    }
...