The EFSRPC service on Microsoft Windows Server versions 2019 and 2022 does not prevent a caller specifying a local device path allowing any authenticated user to upload arbitrary files to a server.
69dcaa165fe62179a42fd16409e133c7034c05be0577fdf672a5a01f4c88b8f8