Fixed traversal vulnerability in image retrieval