Looks like this request and the one before are the same, allowing to exploit the traversal to upload a file, if it could be moved to a method, and not repeating code, it would help with code readability and complexity!