[LOW] Ibexa DXP Download route allows filename change

PKSA-tkd9-5b5p-5rkj GHSA-g95c-xc83-8353

Affected package: ibexa/core

Affected version: >=4.5.0,<4.5.4

Reported by:
GitHub