In FileZilla Server 1.1.0 we have fixed a directory traversal vulnerability affecting all previous versions of FileZilla Server 1.x
All users of FileZilla Server 1.x must update.
You can download the new version from https://filezilla-project.org/download.php?type=server