CVE-2024-53844: EDDI Path Traversal in Backup Export

EDDI is middleware for connecting and managing LLM-driven chatbots. The backup export endpoint in RestExportService.java takes a botFilename parameter and builds a file path from it without sanitizing the input.

An authenticated attacker passes encoded traversal sequences such as ..%2f..%2fetc%2fpasswd and reads arbitrary files. EDDI normally runs in a Docker container, so the reads stop at the container boundary and do not reach the host. EDDI 5.4 fixes the issue.