ASUS BMC's firmware: path traversal - Record video file function

ASUS BMC firmware's video recording feature doesn't properly validate file paths, allowing an authenticated administrator to access files outside the intended directory using path traversal techniques.

Path traversal vulnerability (CWE-22) in ASUS BMC web management interface's record video file function lacks input validation on file path parameters. An authenticated attacker with administrator credentials can exploit this to read arbitrary system files by manipulating path traversal sequences.