XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+ (CVE-2026-34151) | HOL Guard CVE