Unrestricted File Upload Enabling Arbitrary OS Command Execution in Freo2

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.